chore(deps): update dependency fastmcp to v2.13.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
fastmcp	2.11.3 -> 2.13.0

---

FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

CVE-2025-62801 / GHSA-rj5c-58rq-j5g5

More information

Details

Summary

A command-injection vulnerability lets any attacker who can influence the server_name field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor

Details

1. generate_cursor_deeplink(server_name, …) embeds server_name verbatim in a cursor://…?name= query string.
2. open_deeplink() is invoked with shell=True only on Windows. That calls cmd.exe /c start .
3. Any cmd metacharacter inside server_name (&, |, >, ^, …) escapes the start command and spawns an attacker-chosen process.

PoC

server.py

import random
from fastmcp import FastMCP

mcp = FastMCP(name="test&calc")

@​mcp.tool
def roll_dice(n_dice: int) -> list[int]:
    """Roll `n_dice` 6-sided dice and return the results."""
    return [random.randint(1, 6) for _ in range(n_dice)]

if __name__ == "__main__":
    mcp.run()

then run in the terminal:
fastmcp install cursor server.py

Impact

OS Command / Shell Injection (CWE-78)
Every Windows host that runs fastmcp install cursor is at risk. Developers on their local workstations, CI/CD agents and corporate build machines alike.

Severity

• CVSS Score: 5.4 / 10 (Medium)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/jlowin/fastmcp/security/advisories/GHSA-rj5c-58rq-j5g5
• https://nvd.nist.gov/vuln/detail/CVE-2025-62801
• https://github.com/jlowin/fastmcp

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

FastMCP Auth Integration Allows for Confused Deputy Account Takeover

GHSA-c2jp-c369-7pvx

More information

Details

Summary

FastMCP documentation covers the scenario where it is possible to use Entra ID or other providers for authentication. In this context, because Entra ID does not support Dynamic Client Registration (DCR), the FastMCP-hosted MCP server is acting as the authorization provider, as declared in the Protected Resource Metadata (PRM) document hosted on the server.

For example, on a local MCP server, it may be hosted here:

http://localhost:8000/.well-known/oauth-protected-resource

And the JSON representation of the PRM document:

{
  "resource": "http://localhost:8000/mcp",
  "authorization_servers": [
    "http://localhost:8000/"
  ],
  "scopes_supported": [
    "User.Read",
    "email",
    "openid",
    "profile"
  ],
  "bearer_methods_supported": [
    "header"
  ]
}

Notice that the authorization_servers field contains the MCP server itself - it acts as an OAuth Client to the downstream authorization server (e.g., Entra ID) and as a Authorization Server (AS) to the MCP client.

The FastMCP server also hosts the AS metadata:

http://localhost:8000/.well-known/oauth-authorization-server

With the following content:

{
  "issuer": "http://localhost:8000/",
  "authorization_endpoint": "http://localhost:8000/authorize",
  "token_endpoint": "http://localhost:8000/token",
  "registration_endpoint": "http://localhost:8000/register",
  "scopes_supported": [
    "User.Read",
    "email",
    "openid",
    "profile"
  ],
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ]
}

All of this confirms that the FastMCP server is, in fact, handling the client-to-server authorization and then delegating the downstream effects (i.e., authorization with Entra ID) to its own redirect logic, with a call like this (as seen through MCP Inspector):

http://localhost:8000/authorize?response_type=code&client_id=fdec0bb8-3423-40d0-aa2a-73de26bf6f93&code_challenge=2a9ZxAEr5NEsKPwFWuEFA1W-kFMXc-02u6qc8aLf_g4&code_challenge_method=S256&redirect_uri=http%3A%2F%2Flocalhost%3A6274%2Foauth%2Fcallback%2Fdebug&state=9f23fd47e2b8786b502f116bdbfd6ae3d7d2801167e24fea82f608bb52312bbd&scope=User.Read+email+openid+profile&resource=http%3A%2F%2Flocalhost%3A8000%2Fmcp

When using the built-in FastMCP /authorize endpoint, and in the example above, FastMCP server configured with Entra ID, it will then redirect the user here:

https://login.microsoftonline.com/412e93fe-74e5-4ee6-9b67-1eeb1c79550e/oauth2/v2.0/authorize?response_type=code&client_id=7bac43f2-ca62-4148-93a5-fd5686cb16c0&redirect_uri=http%3A%2F%2Flocalhost%3A8000%2Fauth%2Fcallback&state=Tcv7bbg_v0Qi69RHbCzqR4tQHSHKPQuDDxjuo0wu5qU&scope=User.Read+email+openid+profile&code_challenge=bxICFAJDViuTTHIPUPdSXGLKbNbgPwiB-0ITXUJkjYM&code_challenge_method=S256&resource=http%3A%2F%2Flocalhost%3A8000%2Fmcp

[!NOTE]
In the scenario above, the app registration in Entra ID is set up in the FastMCP server, as outlined in the PoC below.

Notice that the client ID and redirect URIs in the login.microsoftonline.com call are different than the initial /authorize call - that's because we're now switching to using the MCP server's static app registration instead of the DCR client details.

Completing the authorization flow here for the first time for a user would trigger the Entra ID consent flow:

This consent flow is only showed the first time the user needs to use this application. Once the consent is set, they will never be prompted for this unless revoked.

This is where the vulnerability comes in. After the user consented and is authorized, Entra ID will set a browser cookie capturing the authorization state. This helps prevent nagging re-authorization prompts.

With the user consented to the static client for Entra ID that the FastMCP server exposes, they will now not be prompted the next time they need to use the same application ID.

Now, an attacker comes in - in their own MCP client (i.e., they maintain one at https://evil.example.com) they start the authorization with the same remote MCP server and get to the point where the server produces their own authorization URI for this client ID:

http://localhost:8000/authorize?response_type=code&client_id=9a5d63d0-3aa3-465c-b097-0e2e196392dd&code_challenge=2F4Lbfppwd7xuynLT1y4Cy2Dac-S6HOO2B84itAwppw&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fevil.example.com%3A6274%2Foauth%2Fcallback%2Fdebug&state=221fab2ccdc1481511639c110ee7382445930e22be25396b01f32d973d7176dc&scope=User.Read+email+openid+profile&resource=http%3A%2F%2Flocalhost%3A8000%2Fmcp

[!IMPORTANT]
Note that the redirect URI above points to the https://evil.example.com client.

At this point - they grab the URL and coerce the victim (user that already authenticated with Entra ID on their machine) to click on this link. This could be done through spam, spear-phishing, or any other traditional link sharing approaches. The moment the victim clicks on this link, they will be taken to the browser, where there is already a cookie set by Entra ID for the static Entra ID client that the MCP server is using. The DCR-d registered client ID that the FastMCP server is handling now got linked to the internal FastMCP authorization server, and the authorization code is returned to https://evil.example.com.

The user will be automatically speed-ran through the authorization flow (no prompts) and they will effectively give access to the MCP server to the attacker with their account. Attacker can now exchange the authorization code for a token and access the remote MCP server as the victim.

Details

See above - the outline covers the attack vector.

PoC

Standard documented sample that uses Entra ID:

from fastmcp import FastMCP
from fastmcp.server.auth.providers.azure import AzureProvider

##### The AzureProvider handles Azure's token format and validation
auth_provider = AzureProvider(
    client_id="f527ed01-9725-45bd-8173-8d3a017ba02f",  # Your Azure App Client ID
    client_secret="H3X8Q~coFQaI_zpYXePrzdRFZ7xmwEORJJ49tcnw",                 # Your Azure App Client Secret
    tenant_id="412e93fe-74e5-4ee6-9b67-1eeb1c79550e", # Your Azure Tenant ID (REQUIRED)
    base_url="http://localhost:8000",                   # Must match your App registration
    required_scopes=["User.Read", "email", "openid", "profile"],  # Microsoft Graph permissions
    # redirect_path="/auth/callback"                  # Default value, customize if needed
)

mcp = FastMCP(name="Azure Secured App", auth=auth_provider)

##### Add a protected tool to test authentication
@​mcp.tool
async def get_user_info() -> dict:
    """Returns information about the authenticated Azure user."""
    from fastmcp.server.dependencies import get_access_token
    
    token = get_access_token()
    # The AzureProvider stores user data in token claims
    return {
        "azure_id": token.claims.get("sub"),
        "email": token.claims.get("email"),
        "name": token.claims.get("name"),
        "job_title": token.claims.get("job_title"),
        "office_location": token.claims.get("office_location")
    }

Impact

Potential for server account compromise.

Severity

• CVSS Score: 7.3 / 10 (High)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/jlowin/fastmcp/security/advisories/GHSA-c2jp-c369-7pvx
• https://github.com/jlowin/fastmcp

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

FastMCP vulnerable to reflected XSS in client's callback page

CVE-2025-62800 / GHSA-mxxr-jv3v-6pgc

More information

Details

Summary

While setting up an oauth client, it was noticed that the callback page hosted by the client during the flow embeds user-controlled content without escaping or sanitizing it. This leads to a reflected Cross-Site-Scripting vulnerability.

Details

The affected code is located in https://github.com/jlowin/fastmcp/blob/main/src/fastmcp/client/oauth_callback.py, which embeds all values passed to the create_callback_html function via the message parameter it into the callback page without escaping them. This can, for example, be abused by calling the callback server with an XSS payload inside the error GET parameter, the value of which will then be inserted into the callback page, causing the execution of attacker-controlled JavaScript code in the callback server's origin. Note that besides the error parameter, other parameters reaching this function are affected too.

PoC

1. Setup a simple fastmcp client such as this one (the callback server's port was fixated for simplicity):

url="http://127.0.0.1:8000/mcp"
oauth = OAuth(mcp_url=url,callback_port=1337)

async def main():
    async with Client(url, auth=oauth) as client:
        await client.ping()
        
        # List available operations
        tools = await client.list_tools()

        print(f"tools: {tools}")
       
asyncio.run(main())

2. Ensure that the MCP server located at http://127.0.0.1:8000/mcp supports oauth.
3. Start the client.
4. As soon as the callback server has been started, access http://localhost:1337/callback?error=<img/src/onerror=alert(window.origin)>

Note that the exploitation could also for example be initiated by a malicious authorization server by returning the exploitation URL mentioned before in the authorization_endpoint field. The client would then automatically open, causing the XSS to trigger immediatly.

Impact

The impact of this XSS vulnerability is the arbitrary JavaScript execution in the victim's browser in the callback server's origin.

Severity

• CVSS Score: 5.3 / 10 (Medium)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References

• https://github.com/jlowin/fastmcp/security/advisories/GHSA-mxxr-jv3v-6pgc
• https://nvd.nist.gov/vuln/detail/CVE-2025-62800
• https://github.com/jlowin/fastmcp/pull/2090
• https://github.com/jlowin/fastmcp/commit/2a20f54617a37213ed83894a8c2f0ac38a2e83a3
• https://github.com/jlowin/fastmcp

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

jlowin/fastmcp (fastmcp)

v2.13.0: : Cache Me If You Can

Compare Source

FastMCP 2.13.0 "Cache Me If You Can" represents a fundamental maturation of the framework. After months of community feedback on authentication and state management, this release delivers the infrastructure FastMCP needs to handle production workloads: persistent storage, response caching, and pragmatic OAuth improvements that reflect real-world deployment challenges.

💾 Pluggable storage backends bring persistent state to FastMCP servers. Built on py-key-value-aio, a new library from FastMCP maintainer Bill Easton (@​strawgate), the storage layer provides encrypted disk storage by default, platform-aware token management, and a simple key-value interface for application state. We're excited to bring this elegantly designed library into the FastMCP ecosystem - it's both powerful and remarkably easy to use, including wrappers to add encryption, TTLs, caching, and more to backends ranging from Elasticsearch, Redis, DynamoDB, filesystem, in-memory, and more! OAuth providers now automatically persist tokens across restarts, and developers can store arbitrary state without reaching for external databases. This foundation enables long-running sessions, cached credentials, and stateful applications built on MCP.

🔐 OAuth maturity brings months of production learnings into the framework. The new consent screen prevents confused deputy and authorization bypass attacks discovered in earlier versions while providing a clean UX with customizable branding. The OAuth proxy now issues its own tokens with automatic key derivation from client secrets, and RFC 7662 token introspection support enables enterprise auth flows. Path prefix mounting enables OAuth-protected servers to integrate into existing web applications under custom paths like /api, and MCP 1.17+ compliance with RFC 9728 ensures protocol compatibility. Combined with improved error handling and platform-aware token storage, OAuth is now production-ready and security-hardened for serious applications.

FastMCP now supports out-of-the-box authentication with:

• WorkOS and AuthKit
• GitHub
• Google
• Azure (Entra ID)
• AWS Cognito
• Auth0
• Descope
• Scalekit
• JWTs
• RFC 7662 token introspection

⚡ Response Caching Middleware dramatically improves performance for expensive operations. Cache tool and resource responses with configurable TTLs, reducing redundant API calls and speeding up repeated queries.

🔄 Server lifespans provide proper initialization and cleanup hooks that run once per server instance instead of per client session. This fixes a long-standing source of confusion in the MCP SDK and enables proper resource management for database connections, background tasks, and other server-level state. Note: this is a breaking behavioral change if you were using the lifespan parameter.

✨ Developer experience improvements include Pydantic input validation for better type safety, icon support for richer UX, RFC 6570 query parameters for resource templates, improved Context API methods (list_resources, list_prompts, get_prompt), and async file/directory resources.

This release includes contributions from 20 new contributors and represents the largest feature set in a while. Thank you to everyone who tested preview builds and filed issues - your feedback shaped these improvements!

What's Changed

New Features 🎉

• Add RFC 6570 query parameter support to resource templates by @​jlowin in #​1971
• Add Storage to FastMCP and switch OAuth to use it by @​strawgate in #​1913
• Add Pydantic-compatible input validation by @​jlowin in #​2073
• Add RFC 7662 token introspection provider by @​jlowin in #​2074
• Add Response Caching Middleware by @​strawgate in #​1845
• Support mounting OAuth-protected servers under path prefixes by @​jlowin in #​2119
• OAuth proxy issues its own tokens by @​jlowin in #​2109
• Implement icon support by @​jlowin in #​2121
• Add ToolInjectionMiddleware + Tools for Read/List Resource/Prompt for Client Compat by @​strawgate in #​2142

Enhancements 🔧

• Add Scalekit Provider for Enterprise Authentication by @​AkshayParihar33 in #​1927
• Add AuthKit DCR example by @​jlowin in #​1935
• Remove redirect path for authkit example by @​jlowin in #​1938
• feat: Follow OAuth 2.1 spec requirements on auth failures by @​tcarac in #​1923
• Refactor OAuth 2.1 error handling with TokenHandler subclass by @​jlowin in #​1948
• Expand timeouts by @​jlowin in #​1954
• Upgrade GitHub workflows to claude-code-action@​v1 by @​jlowin in #​1956
• Add --model claude-sonnet-4-5-20250929 to all workflows by @​jlowin in #​1963
• Improve env vars for marvin by @​jlowin in #​1972
• Add Any annotations to args and kwargs by @​strawgate in #​1994
• Mark GitHub Integration tests as flaky by @​strawgate in #​2000
• Internal refactor of MCP handlers by @​jlowin in #​2005
• Support initialize requests in middleware by @​jlowin in #​1546
• Updates to Logging Middleware by @​strawgate in #​1974
• add supabase-auth by @​aaazzam in #​1997
• Allow direct instantiation of Prompt and Resource classes by @​jlowin in #​2031
• Support customizable env file location by @​jlowin in #​2036
• Improve Tracebacks for narrow terminals by @​jlowin in #​1939
• Refactor mounting logic from managers to server by @​jlowin in #​2069
• feat: expose errlog on stdio transport by @​mpuhacz in #​1991
• feat: Add title, annotations and meta to mixin decorators by @​AnkeshThakur in #​2033
• Add warnings regarding memory store by @​strawgate in #​2052
• Also push client messages (info/warn/debug) to server debug log by @​strawgate in #​2063
• feat: add azp claim by @​roee-hersh in #​1945
• bump kv dependency to 0.2.2 by @​strawgate in #​2089
• Add auto-close workflow for issues needing MRE by @​jlowin in #​2100
• Add client_storage property to aws provider by @​rparme in #​2107
• Update version badge for azure auth docs by @​jlowin in #​2120
• Disable parallel test execution on Windows by @​jlowin in #​2128
• Support custom server name, icons, and link in OAuth Proxy consent page by @​jlowin in #​2135
• Replace subprocess tests with in-process async servers by @​jlowin in #​2006
• Progress replacing asyncio with anyio by @​jlowin in #​2143
• Update CLI logo by @​jlowin in #​2159
• Change auth init log to debug by @​jlowin in #​2160
• allow non write users for marvin flows by @​jlowin in #​2161
• Redesign OAuth consent screen for better UX by @​jlowin in #​2170
• Allow authorization consent screen to be disabled by @​jlowin in #​2172
• example: update server init usage by @​zzstoatzz in #​2200
• Update smart home example again by @​zzstoatzz in #​2201
• Use platformdirs for settings.home by @​jlowin in #​2213
• Add platform-aware OAuth token persistence by @​jlowin in #​2218
• Update CLI logo by @​jlowin in #​2220
• Improve OAuth error messages with custom handlers and middleware by @​jlowin in #​2221
• Fix martian concurrency controls and dedupe issues mcp servers by @​strawgate in #​2240
• Use abstract types for FastMCP class instantiation by @​strawgate in #​2219
• Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store by @​strawgate in #​2223
• Delete performance ratio in unit test by @​jlowin in #​2250
• Small Clean-up by @​strawgate in #​2247
• Add list_resources, list_prompts, and get_prompt methods to Context by @​strawgate in #​2249
• Remove redundant None checks from Context methods by @​jlowin in #​2251

Fixes 🐞

• Fix Python 3.13 websockets deprecation warning by @​jlowin in #​1949
• Fix path resolution in install commands by @​jlowin in #​1951
• Fix SSE endpoint accepting POST requests instead of returning 405 by @​jlowin in #​1953
• Fix claude-code-action@​v1 authentication by @​jlowin in #​1958
• cli: fix banner width by removing emoji variation selectors by @​zzstoatzz in #​1975
• Fix improper conversion of list[Audio | File | Image] helpers by @​joshrubin-p360 in #​1970
• Update doc for tool-transformation regarding output_schema by @​geraint0923 in #​2009
• Azure (Entra) OAuth: Validate token against FastMCP app, not Graph. by @​nbaju1 in #​1891
• Default to FastMCP version when server version not specified by @​jlowin in #​2022
• Check if refresh_token is None by @​Kyle-Dinh in #​2025
• fix: wrong server name in explicit server entrypoint doc by @​alDuncanson in #​2046
• fixed a comment in File class by @​Anurag-gg in #​2066
• Prevent confused deputy attacks in OAuth proxy by @​jlowin in #​2056
• Fix: add missing json_response parameter to run_http_async by @​tradeqvest in #​2071
• Change middleware return types from list to Sequence by @​strawgate in #​2058
• Fix asyncio error when running FastMCP 1.x servers by @​chrisguidry in #​2084
• Escape all HTML to prevent XSS attack by @​jlowin in #​2090
• Remove shell=True from Windows subprocess calls by @​jlowin in #​2091
• Fix experimental parser missing top-level response schemas (#​2087) by @​jlowin in #​2092
• Fix nullable enum validation in OpenAPI converter by @​jlowin in #​2093
• Remove obsolete claude.py with Windows path bug by @​jlowin in #​2101
• Fix log handler to accept any JSON-serializable data type by @​jlowin in #​2102
• Fix missing import in Tool Transformation docs. by @​andrew-mclachlan in #​2108
• transform NotFoundError to standard MCP error by @​omeraha in #​2133
• Fix google scope example by @​jlowin in #​2144
• Update content type in advanced_tool function by @​hyeonjae in #​2147
• Make CORS opt-in via middleware parameter by @​jlowin in #​2150
• Remove warning message in common scenario of all client redirect uri'… by @​jlowin in #​2156
• Remove fonts which weren't rendering in all browsers by @​jlowin in #​2174
• Update environment vars in uvx transport by @​derluke in #​2169
• Restore gray monospace styling for OAuth callback screen by @​jlowin in #​2173
• bug fix in fastmcp install claude-code by @​valayDave in #​2165
• Expose OAuth token management parameters across all providers by @​jlowin in #​2222
• Mark test_github_api_schema_performance as integration test by @​strawgate in #​2242
• Fix Azure scope mismatch causing MCP client validation errors by @​jlowin in #​2243
• Add exc_info=True to inspect command error logging by @​aaazzam in #​2232
• Add version badge for run_server_async in tests docs by @​jlowin in #​2237
• Async FileResource and DirectoryResource by @​strawgate in #​2241

Breaking Changes 🛫

• Switch Lifespan to being a Server Lifespan by @​strawgate in #​2013
• Upgrade to MCP 1.17+ with RFC 9728 compliance by @​jlowin in #​2122

Docs 📚

• Add updates for 2.12.4 by @​jlowin in #​1929
• Update FastAPI docs by @​jlowin in #​1934
• Update ChatGPT docs for Chat mode with Developer Mode by @​jlowin in #​1936
• Additional Tool Transformation Examples for Client Wrapping by @​strawgate in #​2002
• Improve docs on prefix rules by @​jlowin in #​2028
• Add version badge to on_initialize docs by @​jlowin in #​2029
• Delete outdated root docs by @​jlowin in #​2075
• Clarify context is scoped to single MCP request by @​jlowin in #​2099
• Document container limitations for Image/Audio/File objects by @​jlowin in #​2118
• Add security policy by @​jlowin in #​2117
• Add storage backend documentation by @​jlowin in #​2137
• Docs by @​jlowin in #​2145
• Update changelog for 2.12.5 by @​jlowin in #​2146
• docs: Add AWS Cognito resource server requirement and CORS guidance by @​jlowin in #​2149
• Move sampling fallback handler docs to server section by @​jlowin in #​2163
• Fix dead links to py-key-value repository by @​strawgate in #​2217
• Fix middleware example: add context parameter to call_next() by @​jlowin in #​2215
• Add Documentation for FastMCP Server Testing by @​strawgate in #​2244

Dependencies 📦

• Bump py-key-value-aio to 0.2.6 by @​strawgate in #​2196

Other Changes 🦾

• Fix prompt_file input and bot attribution by @​jlowin in #​1960
• Improve Marvin and add a Martian by @​strawgate in #​1982
• Improve the Martian by @​strawgate in #​1983
• Fix Marvin labeling and shorten Martian responses by @​strawgate in #​1987

New Contributors

• @​AkshayParihar33 made their first contribution in #​1927
• @​tcarac made their first contribution in #​1923
• @​joshrubin-p360 made their first contribution in #​1970
• @​geraint0923 made their first contribution in #​2009
• @​nbaju1 made their first contribution in #​1891
• @​aaazzam made their first contribution in #​1997
• @​Kyle-Dinh made their first contribution in #​2025
• @​alDuncanson made their first contribution in #​2046
• @​Anurag-gg made their first contribution in #​2066
• @​tradeqvest made their first contribution in #​2071
• @​mpuhacz made their first contribution in #​1991
• @​AnkeshThakur made their first contribution in #​2033
• @​chrisguidry made their first contribution in #​2084
• @​roee-hersh made their first contribution in #​1945
• @​rparme made their first contribution in #​2107
• @​andrew-mclachlan made their first contribution in #​2108
• @​omeraha made their first contribution in #​2133
• @​hyeonjae made their first contribution in #​2147
• @​derluke made their first contribution in #​2169
• @​valayDave made their first contribution in #​2165

Full Changelog: jlowin/fastmcp@v2.12.4...v2.13.0

v2.12.5: : Safety Pin

Compare Source

This is a point release to pin the MCP SDK below 1.17, which introduced a change that is affecting some FastMCP users who 1) are using FastMCP auth providers and 2) are mounting their MCP servers as part of a larger application, resulting in the .well-known payload appearing in an unexpected location.

The only change in this release is pinning the SDK version: dab2b31

Full Changelog: jlowin/fastmcp@v2.12.4...v2.12.5

v2.12.4: : OIDC What You Did There

Compare Source

FastMCP 2.12.4 adds comprehensive OIDC support and expands authentication options with AWS Cognito and Descope providers. The release also includes improvements to logging middleware, URL handling for nested resources, persistent OAuth client registration storage, and various fixes to the experimental OpenAPI parser.

What's Changed

New Features 🎉

• feat: Add support for OIDC configuration by @​ruhulio in #​1817

Enhancements 🔧

• feat: Move the Starlette context middleware to the front by @​akkuman in #​1812
• Refactor Logging and Structured Logging Middleware by @​strawgate in #​1805
• Update pull_request_template.md by @​jlowin in #​1824
• chore: Set redirect_path default in function by @​ruhulio in #​1833
• feat: Set instructions in code by @​attiks in #​1838
• Automatically Create inline Snapshots by @​strawgate in #​1779
• chore: Cleanup Auth0 redirect_path initialization by @​ruhulio in #​1842
• feat: Add support for Descope Authentication by @​anvibanga in #​1853
• Update descope version badges by @​jlowin in #​1870
• Update welcome images by @​jlowin in #​1884
• Fix rounded edges of image by @​jlowin in #​1886
• optimize test suite by @​zzstoatzz in #​1893
• Enhancement: client completions support context_arguments by @​isijoe in #​1906
• Update Descope icon by @​anvibanga in #​1912
• Add AWS Cognito OAuth Provider for Enterprise Authentication by @​stephaneberle9 in #​1873
• Fix typos discovered by codespell by @​cclauss in #​1922
• Use lowercase namespace for fastmcp logger by @​jlowin in #​1791

Fixes 🐞

• Update quickstart.mdx by @​radi-dev in #​1821
• Remove extraneous union import by @​jlowin in #​1823
• Delay import of Provider classes until FastMCP Server Creation by @​strawgate in #​1820
• fix: correct documentation link in deprecation warning by @​strawgate in #​1828
• fix: Increase default 3s timeout on Pytest by @​dacamposol in #​1866
• fix: Improve URL handling in OIDCConfiguration by @​ruhulio in #​1850
• fix: correct typing for on_read_resource middleware method by @​strawgate in #​1858
• feat(experimental/openapi): replace $ref in additionalProperties; add tests by @​jlowin in #​1735
• Honor client supplied scopes during registration by @​dmikusa in #​1860
• Fix: FastAPI list parameter parsing in experimental OpenAPI parser by @​jlowin in #​1834
• Add log level support for stdio and HTTP transports by @​jlowin in #​1840
• Fix OAuth pre-flight check to accept HTTP 200 responses by @​jlowin in #​1874
• Fix: Preserve OpenAPI parameter descriptions in experimental parser by @​shlomo666 in #​1877
• Add persistent storage for OAuth client registrations by @​jlowin in #​1879
• docs: update release dates based on github releases by @​lodu in #​1890
• Small updates to Sampling types by @​strawgate in #​1882
• remove lockfile smart_home example by @​zzstoatzz in #​1892
• Fix: Remove JSON schema title metadata while preserving parameters named 'title' by @​jlowin in #​1872
• Fix: get_resource_url nested URL handling by @​raphael-linx in #​1914
• Clean up code for creating the resource url by @​jlowin in #​1916
• Fix route count logging in OpenAPI server by @​zzstoatzz in #​1928

Docs 📚

• docs: make Gemini CLI integration discoverable by @​jackwotherspoon in #​1827
• docs: update NEW tags for AI assistant integrations by @​jackwotherspoon in #​1829
• Update wordmark by @​jlowin in #​1832
• docs: improve OAuth and OIDC Proxy documentation by @​jlowin in #​1880
• Update readme + welcome docs by @​jlowin in #​1883
• Update dark mode image in README by @​jlowin in #​1885

New Contributors

• @​radi-dev made their first contribution in #​1821
• @​akkuman made their first contribution in #​1812
• @​ruhulio made their first contribution in #​1817
• @​attiks made their first contribution in #​1838
• @​anvibanga made their first contribution in #​1853
• @​shlomo666 made their first contribution in #​1877
• @​lodu made their first contribution in #​1890
• @​isijoe made their first contribution in #​1906
• @​raphael-linx made their first contribution in #​1914
• @​stephaneberle9 made their first contribution in #​1873
• @​cclauss made their first contribution in #​1922

Full Changelog: jlowin/fastmcp@v2.12.3...v2.12.4

v2.12.3: : Double Time

Compare Source

This release adds an integration with Gemini CLI, improves the flexibility of the OAuth Proxy, and fixes some bugs with the install commands and tool content generation.

What's Changed

Enhancements 🔧

• feat: add support for Gemini CLI integration by @​jackwotherspoon in #​1709
• Protected resource advertises valid scopes, if available by @​dmikusa in #​1742
• feat: Add flexible parameter forwarding to OAuth proxy by @​jlowin in [#​1771](https://redirect.github.com/jlowin/fastmcp

---

Configuration

📅 Schedule: Branch creation - "" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.