modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Rename MCP_PROXY_TOKEN to MCP_PROXY_AUTH_TOKEN (#1)

Browse source 
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
This commit is contained in:
Kent C. Dodds 2025-07-07 15:21:27 -06:00 • committed by GitHub
commit 7d5f7968d1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -166,10 +166,10 @@ If you need to disable authentication (NOT RECOMMENDED), you can set the `DANGER
DANGEROUSLY_OMIT_AUTH=true npm start DANGEROUSLY_OMIT_AUTH=true npm start
``` ```
You can also set the token via the `MCP_PROXY_TOKEN` environment variable when starting the server: You can also set the token via the `MCP_PROXY_AUTH_TOKEN` environment variable when starting the server:
```bash ```bash
MCP_PROXY_TOKEN=$(openssl rand -hex 32) npm start MCP_PROXY_AUTH_TOKEN=$(openssl rand -hex 32) npm start
``` ```
#### Local-only Binding #### Local-only Binding

8
client/bin/start.js
View file

@ -40,7 +40,7 @@ async function startDevServer(serverOptions) {
...process.env, ...process.env,
SERVER_PORT, SERVER_PORT,
CLIENT_PORT, CLIENT_PORT,
MCP_PROXY_TOKEN: sessionToken, MCP_PROXY_AUTH_TOKEN: sessionToken,
MCP_ENV_VARS: JSON.stringify(envVars), MCP_ENV_VARS: JSON.stringify(envVars),
}, },
signal: abort.signal, signal: abort.signal,
@ -99,7 +99,7 @@ async function startProdServer(serverOptions) {
...process.env, ...process.env,
SERVER_PORT, SERVER_PORT,
CLIENT_PORT, CLIENT_PORT,
MCP_PROXY_TOKEN: sessionToken, MCP_PROXY_AUTH_TOKEN: sessionToken,
MCP_ENV_VARS: JSON.stringify(envVars), MCP_ENV_VARS: JSON.stringify(envVars),
}, },
signal: abort.signal, signal: abort.signal,
@ -247,8 +247,8 @@ async function main() {
: "Starting MCP inspector...", : "Starting MCP inspector...",
); );
// Generate session token for authentication // Use provided token from environment or generate a new one
const sessionToken = randomBytes(32).toString("hex"); const sessionToken = process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");
const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH; const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH;
const abort = new AbortController(); const abort = new AbortController();

2
server/src/index.ts
View file

@ -92,7 +92,7 @@ const serverTransports: Map<string, Transport> = new Map<string, Transport>(); /
// Use provided token from environment or generate a new one // Use provided token from environment or generate a new one
const sessionToken = const sessionToken =
process.env.MCP_PROXY_TOKEN || randomBytes(32).toString("hex"); process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");
const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH; const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH;
// Origin validation middleware to prevent DNS rebinding attacks // Origin validation middleware to prevent DNS rebinding attacks