mcp-remote 0.0.16 → 0.0.18

package/README.md

@@ -32,6 +32,29 @@ All the most popular MCP clients (Claude Desktop, Cursor & Windsurf) use the fol
 }
 ```
 
+### Custom Headers
+
+To bypass authentication, or to emit custom headers on all requests to your remote server, pass `--header` CLI arguments:
+
+```json
+{
+  "mcpServers": {
+    "remote-example": {
+      "command": "npx",
+      "args": [
+        "mcp-remote",
+        "https://remote.mcp.server/sse",
+        "--header",
+        "Authorization: Bearer ${AUTH_TOKEN}"
+      ]
+    },
+    "env": {
+      "AUTH_TOKEN": "..."
+    }
+  }
+}
+```
+
 ### Flags
 
 * If `npx` is producing errors, consider adding `-y` as the first argument to auto-accept the installation of the `mcp-remote` package.

package/dist/{chunk-NCBLL6DH.js → chunk-D7JDXBXO.js}

@@ -14,7 +14,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "mcp-remote",
-      version: "0.0.16",
+      version: "0.0.18",
       description: "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
       keywords: [
         "mcp",
@@ -37,8 +37,8 @@ var require_package = __commonJS({
         "mcp-remote-client": "dist/client.js"
       },
       scripts: {
-        dev: "tsup --watch",
         build: "tsup",
+        "build:watch": "tsup --watch",
         check: "prettier --check . && tsc"
       },
       dependencies: {
@@ -120,10 +120,25 @@ function mcpProxy({ transportToClient, transportToServer }) {
     log("Error from remote server:", error);
   }
 }
-async function connectToRemoteServer(serverUrl, authProvider, waitForAuthCode, skipBrowserAuth = false) {
+async function connectToRemoteServer(serverUrl, authProvider, headers, waitForAuthCode, skipBrowserAuth = false) {
   log(`[${pid}] Connecting to remote server: ${serverUrl}`);
   const url = new URL(serverUrl);
-  const transport = new SSEClientTransport(url, { authProvider });
+  const eventSourceInit = {
+    fetch: (url2, init) => {
+      return fetch(url2, {
+        ...init,
+        headers: {
+          ...init?.headers,
+          ...headers
+        }
+      });
+    }
+  };
+  const transport = new SSEClientTransport(url, {
+    authProvider,
+    requestInit: { headers },
+    eventSourceInit
+  });
   try {
     await transport.start();
     log("Connected to remote server");
@@ -139,7 +154,7 @@ async function connectToRemoteServer(serverUrl, authProvider, waitForAuthCode, s
       try {
         log("Completing authorization...");
         await transport.finishAuth(code);
-        const newTransport = new SSEClientTransport(url, { authProvider });
+        const newTransport = new SSEClientTransport(url, { authProvider, requestInit: { headers } });
         await newTransport.start();
         log("Connected to remote server after authentication");
         return newTransport;
@@ -242,6 +257,19 @@ async function parseCommandLineArgs(args, defaultPort, usage) {
   if (clean) {
     args.splice(cleanIndex, 1);
   }
+  const headers = {};
+  args.forEach((arg, i) => {
+    if (arg === "--header" && i < args.length - 1) {
+      const value = args[i + 1];
+      const match = value.match(/^([A-Za-z0-9_-]+):(.*)$/);
+      if (match) {
+        headers[match[1]] = match[2];
+      } else {
+        log(`Warning: ignoring invalid header argument: ${value}`);
+      }
+      args.splice(i, 2);
+    }
+  });
   const serverUrl = args[0];
   const specifiedPort = args[1] ? parseInt(args[1]) : void 0;
   if (!serverUrl) {
@@ -263,7 +291,22 @@ async function parseCommandLineArgs(args, defaultPort, usage) {
   if (clean) {
     log("Clean mode enabled: config files will be reset before reading");
   }
-  return { serverUrl, callbackPort, clean };
+  if (Object.keys(headers).length > 0) {
+    log(`Using custom headers: ${JSON.stringify(headers)}`);
+  }
+  for (const [key, value] of Object.entries(headers)) {
+    headers[key] = value.replace(/\$\{([^}]+)}/g, (match, envVarName) => {
+      const envVarValue = process.env[envVarName];
+      if (envVarValue !== void 0) {
+        log(`Replacing ${match} with environment value in header '${key}'`);
+        return envVarValue;
+      } else {
+        log(`Warning: Environment variable '${envVarName}' not found for header '${key}'.`);
+        return "";
+      }
+    });
+  }
+  return { serverUrl, callbackPort, clean, headers };
 }
 function setupSignalHandlers(cleanup) {
   process.on("SIGINT", async () => {

package/dist/client.js

@@ -7,7 +7,7 @@ import {
   log,
   parseCommandLineArgs,
   setupSignalHandlers
-} from "./chunk-NCBLL6DH.js";
+} from "./chunk-D7JDXBXO.js";
 
 // src/client.ts
 import { EventEmitter } from "events";
@@ -15,7 +15,7 @@ import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
 import { ListResourcesResultSchema, ListToolsResultSchema } from "@modelcontextprotocol/sdk/types.js";
 import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
-async function runClient(serverUrl, callbackPort, clean = false) {
+async function runClient(serverUrl, callbackPort, headers, clean = false) {
   const events = new EventEmitter();
   const serverUrlHash = getServerUrlHash(serverUrl);
   const { server, waitForAuthCode, skipBrowserAuth } = await coordinateAuth(serverUrlHash, callbackPort, events);
@@ -40,7 +40,7 @@ async function runClient(serverUrl, callbackPort, clean = false) {
   );
   const url = new URL(serverUrl);
   function initTransport() {
-    const transport2 = new SSEClientTransport(url, { authProvider });
+    const transport2 = new SSEClientTransport(url, { authProvider, requestInit: { headers } });
     transport2.onmessage = (message) => {
       log("Received message:", JSON.stringify(message, null, 2));
     };
@@ -108,8 +108,8 @@ async function runClient(serverUrl, callbackPort, clean = false) {
   }
   log("Listening for messages. Press Ctrl+C to exit.");
 }
-parseCommandLineArgs(process.argv.slice(2), 3333, "Usage: npx tsx client.ts [--clean] <https://server-url> [callback-port]").then(({ serverUrl, callbackPort, clean }) => {
-  return runClient(serverUrl, callbackPort, clean);
+parseCommandLineArgs(process.argv.slice(2), 3333, "Usage: npx tsx client.ts [--clean] <https://server-url> [callback-port]").then(({ serverUrl, callbackPort, clean, headers }) => {
+  return runClient(serverUrl, callbackPort, headers, clean);
 }).catch((error) => {
   console.error("Fatal error:", error);
   process.exit(1);

package/dist/proxy.js

@@ -8,12 +8,12 @@ import {
   mcpProxy,
   parseCommandLineArgs,
   setupSignalHandlers
-} from "./chunk-NCBLL6DH.js";
+} from "./chunk-D7JDXBXO.js";
 
 // src/proxy.ts
 import { EventEmitter } from "events";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-async function runProxy(serverUrl, callbackPort, clean = false) {
+async function runProxy(serverUrl, callbackPort, headers, clean = false) {
   const events = new EventEmitter();
   const serverUrlHash = getServerUrlHash(serverUrl);
   const { server, waitForAuthCode, skipBrowserAuth } = await coordinateAuth(serverUrlHash, callbackPort, events);
@@ -29,7 +29,7 @@ async function runProxy(serverUrl, callbackPort, clean = false) {
   }
   const localTransport = new StdioServerTransport();
   try {
-    const remoteTransport = await connectToRemoteServer(serverUrl, authProvider, waitForAuthCode, skipBrowserAuth);
+    const remoteTransport = await connectToRemoteServer(serverUrl, authProvider, headers, waitForAuthCode, skipBrowserAuth);
     mcpProxy({
       transportToClient: localTransport,
       transportToServer: remoteTransport
@@ -72,8 +72,8 @@ to the CA certificate file. If using claude_desktop_config.json, this might look
     process.exit(1);
   }
 }
-parseCommandLineArgs(process.argv.slice(2), 3334, "Usage: npx tsx proxy.ts [--clean] <https://server-url> [callback-port]").then(({ serverUrl, callbackPort, clean }) => {
-  return runProxy(serverUrl, callbackPort, clean);
+parseCommandLineArgs(process.argv.slice(2), 3334, "Usage: npx tsx proxy.ts [--clean] <https://server-url> [callback-port]").then(({ serverUrl, callbackPort, clean, headers }) => {
+  return runProxy(serverUrl, callbackPort, headers, clean);
 }).catch((error) => {
   log("Fatal error:", error);
   process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-remote",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "description": "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
   "keywords": [
     "mcp",
@@ -23,8 +23,8 @@
     "mcp-remote-client": "dist/client.js"
   },
   "scripts": {
-    "dev": "tsup --watch",
     "build": "tsup",
+    "build:watch": "tsup --watch",
     "check": "prettier --check . && tsc"
   },
   "dependencies": {