@modelcontextprotocol/inspector 0.14.1 → 0.14.3

package/client/dist/assets/{OAuthCallback-D7GXYYW8.js → OAuthCallback-BrCtrNqU.js}

@@ -1,4 +1,4 @@
-import { u as useToast, r as reactExports, j as jsxRuntimeExports, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-TghXC4TH.js";
+import { u as useToast, r as reactExports, j as jsxRuntimeExports, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-DYfnI33L.js";
 import { p as parseOAuthCallbackParams, g as generateOAuthErrorDescription } from "./oauthUtils-DTcoXpSP.js";
 const OAuthCallback = ({ onConnect }) => {
   const { toast } = useToast();

package/client/dist/assets/{OAuthDebugCallback-25cy6Vcm.js → OAuthDebugCallback-CnQiL6bh.js}

@@ -1,4 +1,4 @@
-import { r as reactExports, S as SESSION_KEYS, j as jsxRuntimeExports } from "./index-TghXC4TH.js";
+import { r as reactExports, S as SESSION_KEYS, j as jsxRuntimeExports } from "./index-DYfnI33L.js";
 import { p as parseOAuthCallbackParams, g as generateOAuthErrorDescription } from "./oauthUtils-DTcoXpSP.js";
 const OAuthDebugCallback = ({ onConnect }) => {
   reactExports.useEffect(() => {

package/client/dist/assets/{index-TghXC4TH.js → index-DYfnI33L.js}

@@ -1,4 +1,4 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/OAuthCallback-D7GXYYW8.js","assets/oauthUtils-DTcoXpSP.js","assets/OAuthDebugCallback-25cy6Vcm.js"])))=>i.map(i=>d[i]);
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/OAuthCallback-BrCtrNqU.js","assets/oauthUtils-DTcoXpSP.js","assets/OAuthDebugCallback-CnQiL6bh.js"])))=>i.map(i=>d[i]);
 function _mergeNamespaces(n, m2) {
   for (var i = 0; i < m2.length; i++) {
     const e = m2[i];
@@ -24156,7 +24156,7 @@ const StdErrNotificationSchema = NotificationSchema.extend({
 ClientNotificationSchema.or(
   StdErrNotificationSchema
 ).or(ServerNotificationSchema).or(NotificationSchema);
-const version$1 = "0.14.1";
+const version$1 = "0.14.3";
 const packageJson = {
   version: version$1
 };
@@ -24177,7 +24177,10 @@ const getMCPServerRequestMaxTotalTimeout = (config) => {
   return config.MCP_REQUEST_MAX_TOTAL_TIMEOUT.value;
 };
 const getMCPProxyAuthToken = (config) => {
-  return config.MCP_PROXY_AUTH_TOKEN.value;
+  return {
+    token: config.MCP_PROXY_AUTH_TOKEN.value,
+    header: "X-MCP-Proxy-Auth"
+  };
 };
 const getSearchParam = (key) => {
   try {
@@ -24408,10 +24411,10 @@ function useConnection({
   const checkProxyHealth = async () => {
     try {
       const proxyHealthUrl = new URL(`${getMCPProxyAddress(config)}/health`);
-      const proxyAuthToken = getMCPProxyAuthToken(config);
+      const { token: proxyAuthToken, header: proxyAuthTokenHeader } = getMCPProxyAuthToken(config);
       const headers = {};
       if (proxyAuthToken) {
-        headers["Authorization"] = `Bearer ${proxyAuthToken}`;
+        headers[proxyAuthTokenHeader] = `Bearer ${proxyAuthToken}`;
       }
       const proxyHealthResponse = await fetch(proxyHealthUrl, { headers });
       const proxyHealth = await proxyHealthResponse.json();
@@ -24472,10 +24475,10 @@ function useConnection({
           headers[authHeaderName] = `Bearer ${token}`;
         }
       }
-      const proxyAuthToken = getMCPProxyAuthToken(config);
+      const { token: proxyAuthToken, header: proxyAuthTokenHeader } = getMCPProxyAuthToken(config);
       const proxyHeaders = {};
       if (proxyAuthToken) {
-        proxyHeaders["Authorization"] = `Bearer ${proxyAuthToken}`;
+        proxyHeaders[proxyAuthTokenHeader] = `Bearer ${proxyAuthToken}`;
       }
       let transportOptions;
       let mcpProxyServerUrl;
@@ -35295,7 +35298,7 @@ const useTheme = () => {
     [theme, setThemeWithSideEffect]
   );
 };
-const version = "0.14.1";
+const version = "0.14.3";
 var [createTooltipContext, createTooltipScope] = createContextScope("Tooltip", [
   createPopperScope
 ]);
@@ -37297,9 +37300,9 @@ const App = () => {
   }, [sseUrl]);
   reactExports.useEffect(() => {
     const headers = {};
-    const proxyAuthToken = getMCPProxyAuthToken(config);
+    const { token: proxyAuthToken, header: proxyAuthTokenHeader } = getMCPProxyAuthToken(config);
     if (proxyAuthToken) {
-      headers["Authorization"] = `Bearer ${proxyAuthToken}`;
+      headers[proxyAuthTokenHeader] = `Bearer ${proxyAuthToken}`;
     }
     fetch(`${getMCPProxyAddress(config)}/config`, { headers }).then((response) => response.json()).then((data2) => {
       setEnv(data2.defaultEnvironment);
@@ -37516,13 +37519,13 @@ const App = () => {
   ) });
   if (window.location.pathname === "/oauth/callback") {
     const OAuthCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthCallback-D7GXYYW8.js"), true ? __vite__mapDeps([0,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthCallback-BrCtrNqU.js"), true ? __vite__mapDeps([0,1]) : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthCallback, { onConnect: onOAuthConnect }) });
   }
   if (window.location.pathname === "/oauth/callback/debug") {
     const OAuthDebugCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthDebugCallback-25cy6Vcm.js"), true ? __vite__mapDeps([2,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthDebugCallback-CnQiL6bh.js"), true ? __vite__mapDeps([2,1]) : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthDebugCallback, { onConnect: onOAuthDebugConnect }) });
   }

package/client/dist/index.html

@@ -5,7 +5,7 @@
     <link rel="icon" type="image/svg+xml" href="/mcp.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>MCP Inspector</title>
-    <script type="module" crossorigin src="/assets/index-TghXC4TH.js"></script>
+    <script type="module" crossorigin src="/assets/index-DYfnI33L.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-C1MLjTGf.css">
   </head>
   <body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/inspector",
-  "version": "0.14.1",
+  "version": "0.14.3",
   "description": "Model Context Protocol inspector",
   "license": "MIT",
   "author": "Anthropic, PBC (https://anthropic.com)",
@@ -38,12 +38,14 @@
     "prettier-check": "prettier --check .",
     "lint": "prettier --check . && cd client && npm run lint",
     "prepare": "npm run build",
-    "publish-all": "npm publish --workspaces --access public && npm publish --access public"
+    "publish-all": "npm publish --workspaces --access public && npm publish --access public",
+    "update-version": "node scripts/update-version.js",
+    "check-version": "node scripts/check-version-consistency.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/inspector-cli": "^0.14.1",
-    "@modelcontextprotocol/inspector-client": "^0.14.1",
-    "@modelcontextprotocol/inspector-server": "^0.14.1",
+    "@modelcontextprotocol/inspector-cli": "^0.14.3",
+    "@modelcontextprotocol/inspector-client": "^0.14.3",
+    "@modelcontextprotocol/inspector-server": "^0.14.3",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "concurrently": "^9.0.1",
     "open": "^10.1.0",

package/server/build/index.js

@@ -97,12 +97,15 @@ const authMiddleware = (req, res, next) => {
             message: "Authentication required. Use the session token shown in the console when starting the server.",
         });
     };
-    const authHeader = req.headers.authorization;
-    if (!authHeader || !authHeader.startsWith("Bearer ")) {
+    const authHeader = req.headers["x-mcp-proxy-auth"];
+    const authHeaderValue = Array.isArray(authHeader)
+        ? authHeader[0]
+        : authHeader;
+    if (!authHeaderValue || !authHeaderValue.startsWith("Bearer ")) {
         sendUnauthorized();
         return;
     }
-    const providedToken = authHeader.substring(7); // Remove 'Bearer ' prefix
+    const providedToken = authHeaderValue.substring(7); // Remove 'Bearer ' prefix
     const expectedToken = sessionToken;
     // Convert to buffers for timing-safe comparison
     const providedBuffer = Buffer.from(providedToken);
@@ -142,7 +145,7 @@ const createTransport = async (req) => {
     else if (transportType === "sse") {
         const url = query.url;
         const headers = getHttpHeaders(req, transportType);
-        console.log(`SSE transport: url=${url}, headers=${Object.keys(headers)}`);
+        console.log(`SSE transport: url=${url}, headers=${JSON.stringify(headers)}`);
         const transport = new SSEClientTransport(new URL(url), {
             eventSourceInit: {
                 fetch: (url, init) => fetch(url, { ...init, headers }),