🚀 The fast, Pythonic way to build MCP servers and clients. https://gofastmcp.com
Find a file
Jeremiah Lowin 016b9f90e0
Fix confused deputy attack via consent binding cookie (#3201)
* Add consent binding cookie to prevent confused deputy attacks (GHSA-rww4-4w9c-7733)

The OAuthProxy's consent page verified user intent but didn't bind the
consenting browser to the IdP callback. An attacker could intercept the
upstream authorization URL after consent and send it to a victim, whose
browser would complete the flow without having the consent cookie.

This adds a signed consent binding cookie set during consent approval
(both manual and auto-approve paths) and verified in the IdP callback
handler. A different browser won't have this cookie and gets a 403.

* Use startswith for URL assertion in consent binding test

* Store consent bindings as per-transaction map to support parallel flows

* Only accept __Host- consent binding cookie on HTTPS

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-17 10:24:07 -05:00
.claude/skills Add agent skills for testing and code review (#2846) 2026-01-12 11:24:39 -05:00
.cursor/rules Add agent skills for testing and code review (#2846) 2026-01-12 11:24:39 -05:00
.github Minimize resolved review threads in PRs (#3200) 2026-02-17 08:22:31 -05:00
docs Fix confused deputy attack via consent binding cookie (#3201) 2026-02-17 10:24:07 -05:00
examples docs: fix stale get_* references, now list_* (#3168) 2026-02-12 13:45:49 -06:00
scripts Make duplicate bot less aggressive (#2981) 2026-01-22 09:22:12 -05:00
skills/fastmcp-client-cli Add fastmcp discover and name-based server resolution (#3055) 2026-02-01 21:27:22 -05:00
src/fastmcp Fix confused deputy attack via consent binding cookie (#3201) 2026-02-17 10:24:07 -05:00
tests Fix confused deputy attack via consent binding cookie (#3201) 2026-02-17 10:24:07 -05:00
v3-notes docs: fix stale get_* references, now list_* (#3168) 2026-02-12 13:45:49 -06:00
.ccignore Update .ccignore 2025-06-30 18:41:04 -04:00
.gitignore Add loq pre-commit hook for file size enforcement (#2847) 2026-01-12 11:37:45 -05:00
.pre-commit-config.yaml Add loq file size limits and clean up type ignores (#2859) 2026-01-13 07:29:12 -05:00
.python-version Initial commit 2024-11-29 16:42:40 -05:00
AGENTS.md Support async auth checks (#3152) 2026-02-11 12:48:51 -05:00
CLAUDE.md Consolidate agent instructions into AGENTS.md (#1404) 2025-08-08 11:55:06 -04:00
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md (#1523) 2025-08-16 16:28:15 -04:00
justfile Split transports.py into modular structure (#2921) 2026-01-18 22:11:25 -05:00
LICENSE Basic cleanup 2025-04-05 17:39:51 -04:00
logo.py Update CLI logo (#2220) 2025-10-22 21:29:04 -04:00
loq.toml Fix confused deputy attack via consent binding cookie (#3201) 2026-02-17 10:24:07 -05:00
pyproject.toml Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00
README.md Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
SECURITY.md Add security policy (#2117) 2025-10-16 18:04:43 -04:00
uv.lock Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00

FastMCP Logo

FastMCP 🚀

Move fast and make things.

Made with 💙 by Prefect

Docs Discord PyPI - Version Tests License

jlowin%2Ffastmcp | Trendshift


The Model Context Protocol (MCP) provides a standardized way to connect AI agents to tools and data. FastMCP makes it easy to build MCP applications with clean, Pythonic code:

from fastmcp import FastMCP

mcp = FastMCP("Demo 🚀")

@mcp.tool
def add(a: int, b: int) -> int:
    """Add two numbers"""
    return a + b

if __name__ == "__main__":
    mcp.run()

Why FastMCP

The Model Context Protocol (MCP) lets you give agents access to your tools and data. But building an effective MCP application is harder than it looks.

FastMCP handles all of it. Declare a tool with a Python function, and the schema, validation, and documentation are generated automatically. Connect to a server with a URL, and transport negotiation, authentication, and protocol lifecycle are managed for you. You focus on your logic, and the MCP part just works: with FastMCP, best practices are built in.

That's why FastMCP is the standard framework for working with MCP. FastMCP 1.0 was incorporated into the official MCP SDK in 2024. Today, the actively maintained standalone project is downloaded a million times a day, and some version of FastMCP powers 70% of MCP servers across all languages.

FastMCP has three pillars:

Servers
Servers

Expose tools, resources, and prompts to LLMs.
Apps
Apps

Give your tools interactive UIs rendered directly in the conversation.
Clients
Clients

Connect to any MCP server — local or remote, programmatic or CLI.

Servers wrap your Python functions into MCP-compliant tools, resources, and prompts. Clients connect to any server with full protocol support. And Apps give your tools interactive UIs rendered directly in the conversation.

Move fast and make things.

Installation

Note

FastMCP 3.0 is currently a release candidate. Install with: pip install fastmcp==3.0.0rc1

For production systems requiring stability, pin to v2: pip install 'fastmcp<3'

We recommend installing FastMCP with uv:

uv pip install fastmcp

For full installation instructions, including verification and upgrading, see the Installation Guide.

📚 Documentation

FastMCP's complete documentation is available at gofastmcp.com, including detailed guides, API references, and advanced patterns.

Documentation is also available in llms.txt format, which is a simple markdown standard that LLMs can consume easily:

  • llms.txt is essentially a sitemap, listing all the pages in the documentation.
  • llms-full.txt contains the entire documentation. Note this may exceed the context window of your LLM.

Community: Join our Discord server to connect with other FastMCP developers and share what you're building.

Contributing

We welcome contributions! See the Contributing Guide for setup instructions, testing requirements, and PR guidelines.