@modelcontextprotocol/inspector 1.0.1 → 1.0.3

package/README.md

@@ -213,6 +213,10 @@ If you need to disable authentication (NOT RECOMMENDED), you can set the `DANGER
 DANGEROUSLY_OMIT_AUTH=true npm start
 ```
 
+Only `true`, `1` or `yes` (case-insensitive) disable authentication. Any other value, including `false`, `0` or an empty string, leaves it enabled.
+
+While authentication is disabled, the proxy accepts only requests that carry an `Origin` header from an allowed origin (see `ALLOWED_ORIGINS` below), which the Inspector web client sends in its default setup, where it and the proxy run on different ports. Non-browser clients that send no `Origin` header need authentication enabled and the session token.
+
 ---
 
 **🚨 WARNING 🚨**
@@ -247,6 +251,18 @@ To prevent DNS rebinding attacks, the MCP Inspector validates the `Origin` heade
 ALLOWED_ORIGINS=http://localhost:6274,http://localhost:8000 npm start
 ```
 
+#### Same-origin API Requests
+
+The proxy also serves the MCP Apps sandbox, so app content runs on the proxy's own origin. Because a same-origin request carries no `Origin` header, the proxy additionally rejects any API request whose `Sec-Fetch-Site` header is `same-origin`. The Inspector client always runs on a different port than the proxy, so its requests are never same-origin; non-browser clients (the CLI, curl) send no such header and are unaffected.
+
+If you serve the client and the proxy from a single origin, for example behind one reverse proxy that routes by path, the client's own API requests become same-origin and are rejected. In that setup you can disable the check (NOT RECOMMENDED) by setting the `DANGEROUSLY_ALLOW_SAME_ORIGIN_API` environment variable:
+
+```bash
+DANGEROUSLY_ALLOW_SAME_ORIGIN_API=true npm start
+```
+
+Only `true`, `1` or `yes` (case-insensitive) disable the check. Any other value, including `false`, `0` or an empty string, leaves it enabled. While it is disabled, documents served by the proxy, including MCP App content in the sandbox, can call the proxy API, and the proxy prints a warning at startup.
+
 ### Configuration
 
 The MCP Inspector supports the following configuration settings. To change them, click on the `Configuration` button in the MCP Inspector UI:
@@ -383,6 +399,8 @@ http://localhost:6274/?MCP_SERVER_REQUEST_TIMEOUT=60000&MCP_REQUEST_TIMEOUT_RESE
 
 Note that if both the query param and the corresponding localStorage item are set, the query param will take precedence.
 
+An `MCP_PROXY_FULL_ADDRESS` supplied this way is kept for that browser tab only (including across the OAuth redirect) and is not saved for later sessions. If it differs from the saved proxy address, the saved proxy session token is not sent to it: include `MCP_PROXY_AUTH_TOKEN` in the same URL, or enter the token in the Configuration panel.
+
 ### From this repository
 
 If you're working on the inspector itself:

package/client/bin/start.js

@@ -9,6 +9,15 @@ import { randomBytes } from "crypto";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const DEFAULT_MCP_PROXY_LISTEN_PORT = "6277";
 
+// Only an explicit truthy value disables auth; unset, empty, "false", "0" and
+// anything unrecognized leave it enabled. Identical to isAuthDisabledFlag in
+// server/src/request-guards.ts (whose parser lives in server/src/env-flags.ts)
+// so the launcher and the proxy always agree; keep the two in sync.
+function isAuthDisabledFlag(value) {
+  if (value === undefined) return false;
+  return ["true", "1", "yes"].includes(value.trim().toLowerCase());
+}
+
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms, true));
 }
@@ -292,7 +301,7 @@ async function main() {
   // Use provided token from environment or generate a new one
   const sessionToken =
     process.env.MCP_PROXY_AUTH_TOKEN || randomBytes(32).toString("hex");
-  const authDisabled = !!process.env.DANGEROUSLY_OMIT_AUTH;
+  const authDisabled = isAuthDisabledFlag(process.env.DANGEROUSLY_OMIT_AUTH);
 
   const abort = new AbortController();
 

package/client/dist/assets/{OAuthCallback-DKaW5Tk8.js → OAuthCallback-jbB02Bt3.js}

@@ -1,4 +1,4 @@
-import { u as useToast, r as reactExports, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-CH-qD91V.js";
+import { u as useToast, r as reactExports, c as clearOAuthConnectionSnapshot, j as jsxRuntimeExports, p as parseOAuthCallbackParams, g as generateOAuthErrorDescription, S as SESSION_KEYS, I as InspectorOAuthClientProvider, a as auth } from "./index-C2CDzlVy.js";
 const OAuthCallback = ({ onConnect }) => {
   const { toast } = useToast();
   const hasProcessedRef = reactExports.useRef(false);
@@ -42,9 +42,13 @@ const OAuthCallback = ({ onConnect }) => {
         description: "Successfully authenticated with OAuth",
         variant: "default"
       });
-      onConnect(serverUrl);
+      const refusal = onConnect(serverUrl);
+      if (refusal) {
+        notifyError(refusal);
+      }
     };
     handleCallback().finally(() => {
+      clearOAuthConnectionSnapshot();
       window.history.replaceState({}, document.title, "/");
     });
   }, [toast, onConnect]);

package/client/dist/assets/{OAuthDebugCallback-Bx3X7Zkh.js → OAuthDebugCallback-VeJ8bP3s.js}

@@ -1,4 +1,4 @@
-import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-CH-qD91V.js";
+import { r as reactExports, S as SESSION_KEYS, p as parseOAuthCallbackParams, j as jsxRuntimeExports, g as generateOAuthErrorDescription } from "./index-C2CDzlVy.js";
 const OAuthDebugCallback = ({ onConnect }) => {
   reactExports.useEffect(() => {
     let isProcessed = false;