Change default binding from 0.0.0.0 to 127.0.0.1 to align with security recommendations (#738)

This commit is contained in:
ciccolo-anthropic 2025-05-20 12:23:19 -07:00 • committed by GitHub
commit 2ca2de767b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 7 additions and 7 deletions

View file

@ -114,7 +114,7 @@ def main(port: int, transport: str) -> int:
import uvicorn
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
else:
from mcp.server.stdio import stdio_server

View file

@ -72,7 +72,7 @@ def main(port: int, transport: str) -> int:
import uvicorn
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
else:
from mcp.server.stdio import stdio_server

View file

@ -136,6 +136,6 @@ def main(
import uvicorn
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
return 0

View file

@ -164,6 +164,6 @@ def main(
import uvicorn
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
return 0

View file

@ -84,7 +84,7 @@ def main(port: int, transport: str) -> int:
import uvicorn
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
else:
from mcp.server.stdio import stdio_server

View file

@ -87,7 +87,7 @@ class Settings(BaseSettings, Generic[LifespanResultT]):
log_level: Literal["DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"] = "INFO"
# HTTP settings
host: str = "0.0.0.0"
host: str = "127.0.0.1"
port: int = 8000
mount_path: str = "/" # Mount path (e.g. "/github", defaults to root path)
sse_path: str = "/sse"

View file

@ -27,7 +27,7 @@ Example usage:
# Create and run Starlette app
starlette_app = Starlette(routes=routes)
uvicorn.run(starlette_app, host="0.0.0.0", port=port)
uvicorn.run(starlette_app, host="127.0.0.1", port=port)
```
Note: The handle_sse function must return a Response to avoid a "TypeError: 'NoneType'