fastmcp/docs/more
Chris Guidry db4450e40b Encrypt task context snapshots at rest
A background task still needs to know who asked for the work, so FastMCP
captures the caller's access token and every inbound HTTP header at
submission time and writes that snapshot to the Docket backend. On a
distributed backend the credentials sit in Redis as plaintext for the
task's TTL, and a rediss:// URL protects only the wire. Set
FASTMCP_ENCRYPTION_KEY and the snapshot becomes a Fernet token instead.

Restore fails closed: a worker that cannot decrypt a snapshot fails the
task rather than run the tool with no caller.

Closes #4747

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-05 15:21:19 -04:00
..
faq.mdx Rewrite the v4 What's New page and document server extensions (#4698) 2026-07-28 20:05:45 -04:00
settings.mdx Encrypt task context snapshots at rest 2026-08-05 15:21:19 -04:00