modelcontextprotocol/inspector
Watch
1
0
Fork
You've already forked inspector
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2
1,582 commits 1 branch 87 tags 30 MiB
Commit graph

1,582 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ola Hungerford
d3fcedc81a
 		Merge branch 'main' into cmgriffing/fix-cli-truncated-output 2025-08-28 20:40:58 -07:00
Ola Hungerford
5ca3aab124
 		Merge pull request #716 from philfreo/feature/add-header-support 
Add support for --header flags in MCP Inspector CLI
 2025-08-28 20:03:10 -07:00
Ola Hungerford
897d9f07bc
 		Merge branch 'main' into feature/add-header-support 2025-08-28 19:44:09 -07:00
Chris Griffing
f4a176eb7b Merge branch 'main' of github.com:modelcontextprotocol/inspector into cmgriffing/fix-cli-truncated-output 2025-08-28 17:55:02 -07:00
Cliff Hall
ef11c36a9e
 		Merge pull request #647 from olaservo/parse-tool-arg 
Parse tool args from CLI as JsonValue instead of just strings
 2025-08-28 14:33:05 -04:00
Ola Hungerford
9da9f01e37
 		Merge branch 'main' into parse-tool-arg 2025-08-27 20:40:59 -07:00
olaservo
03d48f3787 Add example to Readme of calling a tool with JSON arguments 2025-08-27 20:40:28 -07:00
Ola Hungerford
e5d0f34981
 		Merge branch 'main' into feature/add-header-support 2025-08-27 20:33:24 -07:00
Ola Hungerford
f94f2d8203
 		Merge pull request #708 from richardkmichael/fix-630 
fix: STDIO and SSE transports need MCP_FULL_PROXY_ADDRESS
 2025-08-27 20:17:33 -07:00
Ola Hungerford
7a32c3db92
 		Merge pull request #697 from Raghuboi/docs/utils-jsdoc 
docs: add JSDoc documentation to utility functions
 2025-08-27 20:16:25 -07:00
Ola Hungerford
73873e2b77
 		Merge branch 'main' into docs/utils-jsdoc 2025-08-27 20:13:01 -07:00
Ola Hungerford
161f5d365a
 		Merge branch 'main' into fix-630 2025-08-27 19:54:07 -07:00
Ola Hungerford
cc6b2656dd
 		Merge branch 'main' into parse-tool-arg 2025-08-27 19:51:52 -07:00
Chris Griffing
67f35363d8 Make cli output awaitable to prevent truncating the result 2025-08-26 16:14:44 -07:00
Cliff Hall
7fc4e87113
 		Merge pull request #728 from olaservo/update-cc-action-yaml 
Update CC GitHub Action to have same config as servers repo action
 2025-08-26 15:24:24 -04:00
olaservo
ddf74d0766 Fix formatting 2025-08-26 10:00:03 -07:00
Ola Hungerford
426a33c2f3
 		Merge branch 'main' into update-cc-action-yaml 2025-08-26 09:58:44 -07:00
Ola Hungerford
616d9face4
 		Merge pull request #746 from cliffhall/docker-readme 
Add Docker container startup command to README.md
 2025-08-25 21:31:12 -07:00
cliffhall
98becdf5e0 In Dockerfile 
- use current-alpine3.22 AS builder
- The node:24-slim has a high vulnerability CVE as yet unfixed which allows running commands on the host as root
 2025-08-25 11:41:44 -04:00
cliffhall
6853dcf42d In Dockerfile 
- use current-alpine3.22 AS builder
- The node:24-slim has a high vulnerability CVE as yet unfixed which allows running commands on the host as root
 2025-08-25 11:31:54 -04:00
cliffhall
c2e117a4a9 Add Docker container startup command to README.md 2025-08-25 10:13:32 -04:00
Richard Michael
61db7918af Align similar /sse and /stdio handlers: formatting and move log statement 2025-08-22 00:47:40 -07:00
Richard Michael
89740ef5d1 Add tests for MCP_PROXY_FULL_ADDRESS SSE endpoint support 
Tests verify that proxyFullAddress query parameter is sent for both
STDIO and SSE transports, but not Streamable HTTP, when
MCP_PROXY_FULL_ADDRESS is configured.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-08-22 00:47:22 -07:00
Richard Michael
3628abca9e Use MCP_PROXY_FULL_ADDRESS for SSE transport backed endpoints 
The STDIO and SSE transports use SSE between the client and the proxy
server.  SSE requires the client to initiate the MCP conversation
(event-stream) at the endpoint provided by the server.  The endpoint
provided by the server must obey where the client sees the server,
rather than being assumed to be server-root `/message`.

The Streamable HTTP endpoint does not need the full proxy address
because the response is an event-stream directly, and does not use SSE.
 2025-08-21 23:11:08 -07:00
Ola Hungerford
0b4e395f2b
 		Merge branch 'main' into parse-tool-arg 2025-08-21 19:12:36 -07:00
Ola Hungerford
f22aa1f5e2
 		Merge pull request #741 from cliffhall/stderr-handling 
Handling of stderr on STDIO servers
 2025-08-21 19:10:19 -07:00
Ola Hungerford
d48164aa09
 		Merge pull request #719 from richardkmichael/fix-704-trim-command-whitespace 
fix: Trim whitespace from Command input to prevent ENOENT
 2025-08-21 18:50:52 -07:00
cliffhall
4cf7aeb9ed proper levels for server shutdown messages 2025-08-21 19:08:51 -04:00
cliffhall
fb0b56505a Trim message before sending to client 2025-08-21 18:55:58 -04:00
cliffhall
c54215252e Trim message before sending to client 2025-08-21 18:40:19 -04:00
cliffhall
f472327ea0 Trim message before sending to client 2025-08-21 18:12:38 -04:00
cliffhall
ec99372d92 * Remove handling of out-of-spec 'notification/stderr' messages. It's not a thing. See https://github.com/modelcontextprotocol/servers/pull/2469 
* Inspect the stderr output of STDIO servers and attempt to assign an appropriate RFC 5424 Syslog Protocol level before sending a leveled logging message to the client
 2025-08-21 18:04:07 -04:00
cliffhall
9dbd5cc85b * Remove handling of out-of-spec 'notification/stderr' messages. It's not a thing. See https://github.com/modelcontextprotocol/servers/pull/2469 
* Inspect the stderr output of STDIO servers and attempt to assign an appropriate RFC 5424 Syslog Protocol level before sending a leveled logging message to the client
 2025-08-21 18:01:29 -04:00
Cliff Hall
8a5a4e5b6a
 		Merge pull request #740 from modelcontextprotocol/fix/validate-urls 
Fix/validate urls for http/https scheme only in auth flow
 2025-08-21 12:15:19 -04:00
Jenn Newton
a018a6d758
 		Apply Prettier formatting 
🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-08-21 15:41:33 +00:00
Jenn Newton
fa2e6b0c40
 		Fix to properly open in new tab for OAuth 
🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-08-21 15:31:53 +00:00
Ola Hungerford
acc0530988
 		Merge branch 'main' into fix-704-trim-command-whitespace 2025-08-20 20:47:37 -07:00
Ola Hungerford
ade237ee6e
 		Merge pull request #714 from modelcontextprotocol/halter73/restore-resource 
Restore AuthDebuggerState.resource as URL
 2025-08-20 07:19:07 -07:00
Ola Hungerford
bb95fccdf1
 		Merge branch 'main' into halter73/restore-resource 2025-08-20 07:16:19 -07:00
Jenn Newton
650f3090d2
 		fix: add validation for OAuth redirect URLs 
- Create shared validateRedirectUrl utility to centralize URL validation
- Only allow HTTP and HTTPS protocols in OAuth authorization URLs
- Fix three vulnerable redirect paths that bypassed validation:
  - AuthDebugger.tsx: Direct window.location.href redirect
  - OAuthFlowProgress.tsx: window.open() without validation
  - OAuthFlowProgress.tsx: Direct anchor href attribute
- Add comprehensive test coverage for URL validation
- Update existing auth.ts to use shared validation utility

This prevents malicious MCP servers from injecting javascript: or data:
protocol URLs that would execute XSS attacks when users are redirected
to the authorization endpoint.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-08-20 10:08:20 -03:00
Ola Hungerford
0e30df8801
 		Merge branch 'main' into fix-704-trim-command-whitespace 2025-08-19 21:12:41 -07:00
Cliff Hall
7fc3de7648
 		Merge pull request #731 from olaservo/setup-prettier-precommit 
Setup prettier precommit
 2025-08-19 13:03:01 -04:00
Ola Hungerford
df6152ee35
 		Update npm prepare script to include husky 2025-08-19 06:57:09 -07:00
Ola Hungerford
fa9b99b5df
 		Update .husky/pre-commit 
Co-authored-by: Cliff Hall <cliff@futurescale.com>
 2025-08-19 06:55:29 -07:00
Stephen Halter
36a30fa3db prettier --write client/src/components/OAuthDebugCallback.tsx 2025-08-18 13:01:13 -07:00
olaservo
420f9a7b9a Remove test formatting file 2025-08-18 08:53:49 -07:00
olaservo
de1754633e Test pre-commit formatting hook with intentionally bad formatting 2025-08-18 08:52:33 -07:00
olaservo
b33dabe8dc Fix: restore original 'prepare' script that was overwritten by husky init 
- Restore 'prepare': 'npm run build' for proper package installation
- Husky pre-commit hooks remain functional via existing .husky directory
 2025-08-18 08:50:57 -07:00
olaservo
610cbddd35 Merge remote-tracking branch 'upstream/main' into setup-prettier-precommit 2025-08-18 08:45:53 -07:00
olaservo
f7b1cd6f43 Setup prettier pre-commit formatting with husky and lint-staged 
- Install husky and lint-staged dev dependencies
- Configure pre-commit hook to run prettier on staged files
- Only format changed files to improve performance
- Prevents CI formatting failures by formatting locally
 2025-08-18 08:43:09 -07:00