Felix Weinberger
e8e990987c
fix: bind to localhost by default to prevent DNS rebinding attacks
...
- Change default binding from 0.0.0.0 (all interfaces) to 127.0.0.1 (localhost only)
- Add HOST environment variable to override binding address when needed
- Update console output to show actual binding address
- Document security change in README with warnings about binding to all interfaces
This prevents remote attackers from accessing the MCP Inspector proxy server,
which has the ability to execute local processes. The proxy should only be
accessible from the local machine unless explicitly configured otherwise.
2025-06-10 18:16:24 +01:00
Sebastian Ko
6c7c417645
add comment
2025-06-10 12:32:52 -04:00
Sebastian Ko
da003c7553
Change '' to ""
2025-06-10 12:32:15 -04:00
Sebastian Ko
66e247b274
Remove additional slash in the end of the proxy base url
2025-06-10 12:17:12 -04:00
Cliff Hall
c8016cd989
Merge branch 'main' into dockerfile
2025-06-09 12:05:44 -04:00
Marc Abramowitz
2c0af88f50
Take screenshots on failure
2025-06-07 08:36:30 -07:00
Marc Abramowitz
cdb9180629
Generate report with https://github.com/daun/playwright-report-summary
2025-06-07 08:22:15 -07:00
Marc Abramowitz
705d7b46c2
e2e_tests.yml: playwright-report and test-result in client dir
2025-06-06 19:33:55 -07:00
Marc Abramowitz
a2a58c2bc2
Install Playwright dependencies
2025-06-06 19:33:55 -07:00
Marc Abramowitz
f06a6e1fb7
npm run prettier-fix
2025-06-06 19:33:55 -07:00
Marc Abramowitz
a421f329e9
git add playwright.config.ts
2025-06-06 19:33:55 -07:00
Marc Abramowitz
826bc35cf2
Upload Playwright Report and Screenshots
2025-06-06 19:33:55 -07:00
Marc Abramowitz
1df83d73f9
Do npm run start in background
...
so that the CI job can proceed
2025-06-06 19:33:55 -07:00
Marc Abramowitz
66ad85aadc
npm run prettier-fix
2025-06-06 19:33:55 -07:00
Marc Abramowitz
4f6a4cebde
Add .github/workflows/e2e_tests.yml
2025-06-06 19:33:55 -07:00
Marc Abramowitz
c803d9327e
Move test:e2e up with other two test scripts
2025-06-06 19:33:54 -07:00
Marc Abramowitz
89e1efc443
Add more Playwright tests
2025-06-06 19:33:54 -07:00
Marc Abramowitz
3a28efe586
Mention npm run test:e2e in CONTRIBUTING.md
2025-06-06 19:33:54 -07:00
Marc Abramowitz
8babc44f0b
Make npm run test:e2e work
2025-06-06 19:33:54 -07:00
Marc Abramowitz
8a13526c8b
Exclude e2e from Jest
2025-06-06 19:33:54 -07:00
Marc Abramowitz
69da70acb7
npm run prettier-fix
2025-06-06 19:33:54 -07:00
Marc Abramowitz
226ad251bd
Add a Playwright e2e test
2025-06-06 19:33:54 -07:00
Cliff Hall
03edbb01ce
Merge pull request #488 from msabramo/tooltip-for-url-field
...
Add tooltip for URL field
2025-06-06 13:38:44 -04:00
Marc Abramowitz
d5ef137c42
Merge branch 'main' into tooltip-for-url-field
2025-06-06 06:00:37 -07:00
Marc Abramowitz
9a7ba3451a
npm run prettier-fix
2025-06-06 05:49:49 -07:00
shaun smith
5ade12d0b1
Merge pull request #478 from cliffhall/normalize-connection-logging
...
Normalize connection logging
2025-06-05 13:58:49 -07:00
Cliff Hall
cf07937f8e
Merge branch 'main' into normalize-connection-logging
2025-06-05 16:55:27 -04:00
evalstate
38e0776193
Merge remote-tracking branch 'upstream/main'
2025-06-05 14:32:24 +01:00
Marc Abramowitz
2ecfdb0f2e
Display tooltip only if sseUrl is set.
2025-06-05 00:25:18 -07:00
Ola Hungerford
e28e08d37d
Merge branch 'main' into fix-required
2025-06-04 19:59:52 -07:00
Ola Hungerford
a2d2cf6f3d
Merge pull request #459 from msabramo/resizable-left-sidebar
...
Resizable left sidebar
2025-06-04 19:58:59 -07:00
Ola Hungerford
6f80feb0b2
Merge branch 'main' into fix-required
2025-06-04 18:35:50 -07:00
olaservo
7bb76b0ddf
Merge branch 'main' of https://github.com/olaservo/inspector
2025-06-04 18:33:09 -07:00
Aaron Powell
37bd103cdb
Support for multi-platform builds
2025-06-05 10:30:09 +10:00
Aaron Powell
30a74d734c
Merge branch 'main' into dockerfile
2025-06-05 10:20:00 +10:00
Aaron Powell
676d454457
Merge branch 'modelcontextprotocol:main' into main
2025-06-05 10:18:42 +10:00
Ola Hungerford
798bc1b793
Merge pull request #489 from cliffhall/bump-version-0.14.0
...
Bump Inspector to 0.14.0
2025-06-04 13:46:39 -07:00
cliffhall
8ef91e359e
Bump Inspector packages to 0.14.0, and sdk to 1.12.1
2025-06-04 16:13:35 -04:00
olaservo
45c9a7b1d7
Merge branch 'main' of https://github.com/olaservo/inspector
2025-06-04 12:10:59 -07:00
Cliff Hall
4bffa62516
Merge pull request #485 from dr3s/450-template-queries
...
fix: Resource template query parameters not appended to request URI
2025-06-04 14:58:22 -04:00
Cliff Hall
cc28a891e9
Merge branch 'main' into 450-template-queries
2025-06-04 14:54:57 -04:00
dr3s
9508cc4627
pretty
2025-06-04 14:44:15 -04:00
Cliff Hall
3772ff30a2
Merge pull request #469 from modelcontextprotocol/pcarleton/auth-debugger-draft
...
[auth] Support new auth metadata endpoint from draft spec
2025-06-04 13:22:08 -04:00
Marc Abramowitz
5da1dc3256
Add tooltip for URL field
...
A quick way to see the full URL if it's cut off
Inspired by @cliffhall's
[comment](https://github.com/modelcontextprotocol/inspector/pull/459#issuecomment-2932277785 )
2025-06-03 22:54:19 -07:00
Marc Abramowitz
13d31596af
Merge branch 'main' into resizable-left-sidebar
2025-06-03 22:29:15 -07:00
Marc Abramowitz
93553d591f
Revert "Add tip to README.md"
...
This reverts commit 0e5e94393a
2025-06-03 22:24:17 -07:00
Aaron Powell
f73894fbf0
Allowing setting of the ports at the environment variable level so the apps are aware of them
2025-06-04 12:30:44 +10:00
Aaron Powell
48af4797f4
Merge remote-tracking branch 'upstream' into dockerfile
2025-06-04 12:18:54 +10:00
Aaron Powell
769d045c16
Converting to multi-stage dockerfile
2025-06-04 12:18:43 +10:00
cliffhall
c485e57a39
Add reporting of the Proxy <-> Server sessionId. It's only possible to get the session id for this leg of the proxy if it is a StreamableHttp connection.
...
* In server/src/index.ts
- slight format tweak of the Client <-> Proxy message so that the two messages will line up when displayed
* In server/src/mcpProxy.ts
- add reportedServerSession boolean initialized to false
- in transportToServer.onmessage,
- if reportedServerSession isn't set yet, report the sessionId if present on the transport, and then set reportedServerSession to true
2025-06-03 17:46:57 -04:00
