mcp-remote 0.0.20 → 0.0.21

package/README.md

@@ -55,6 +55,23 @@ To bypass authentication, or to emit custom headers on all requests to your remo
 }
 ```
 
+**Note:** Cursor has a bug where spaces inside `args` aren't escaped when it invokes `npx`, which ends up mangling these values. You can work around it using:
+
+```jsonc
+{
+  // rest of config...
+  "args": [
+    "mcp-remote",
+    "https://remote.mcp.server/sse",
+    "--header",
+    "Authorization:${AUTH_HEADER}" // note no spaces around ':'
+  ]
+},
+"env": {
+  "AUTH_HEADER": "Bearer <auth-token>" // spaces OK in env vars
+}
+```
+
 ### Flags
 
 * If `npx` is producing errors, consider adding `-y` as the first argument to auto-accept the installation of the `mcp-remote` package.
@@ -87,6 +104,16 @@ To bypass authentication, or to emit custom headers on all requests to your remo
       ]
 ```
 
+* To allow HTTP connections in trusted private networks, add the `--allow-http` flag. Note: This should only be used in secure private networks where traffic cannot be intercepted.
+
+```json
+      "args": [
+        "mcp-remote",
+        "http://internal-service.vpc/sse",
+        "--allow-http"
+      ]
+```
+
 ### Claude Desktop
 
 [Official Docs](https://modelcontextprotocol.io/quickstart/user)

package/dist/{chunk-VQ556LTN.js → chunk-LWDSICAM.js}

@@ -14,7 +14,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "mcp-remote",
-      version: "0.0.20",
+      version: "0.0.21",
       description: "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
       keywords: [
         "mcp",
@@ -271,13 +271,15 @@ async function parseCommandLineArgs(args, defaultPort, usage) {
   });
   const serverUrl = args[0];
   const specifiedPort = args[1] ? parseInt(args[1]) : void 0;
+  const allowHttp = args.includes("--allow-http");
   if (!serverUrl) {
     log(usage);
     process.exit(1);
   }
   const url = new URL(serverUrl);
   const isLocalhost = (url.hostname === "localhost" || url.hostname === "127.0.0.1") && url.protocol === "http:";
-  if (!(url.protocol == "https:" || isLocalhost)) {
+  if (!(url.protocol == "https:" || isLocalhost || allowHttp)) {
+    log("Error: Non-HTTPS URLs are only allowed for localhost or when --allow-http flag is provided");
     log(usage);
     process.exit(1);
   }
@@ -438,11 +440,15 @@ var NodeOAuthClientProvider = class {
     this.callbackPath = options.callbackPath || "/oauth/callback";
     this.clientName = options.clientName || "MCP CLI Client";
     this.clientUri = options.clientUri || "https://github.com/modelcontextprotocol/mcp-cli";
+    this.softwareId = options.softwareId || "2e6dc280-f3c3-4e01-99a7-8181dbd1d23d";
+    this.softwareVersion = options.softwareVersion || MCP_REMOTE_VERSION;
   }
   serverUrlHash;
   callbackPath;
   clientName;
   clientUri;
+  softwareId;
+  softwareVersion;
   get redirectUrl() {
     return `http://127.0.0.1:${this.options.callbackPort}${this.callbackPath}`;
   }
@@ -453,7 +459,9 @@ var NodeOAuthClientProvider = class {
       grant_types: ["authorization_code", "refresh_token"],
       response_types: ["code"],
       client_name: this.clientName,
-      client_uri: this.clientUri
+      client_uri: this.clientUri,
+      software_id: this.softwareId,
+      software_version: this.softwareVersion
     };
   }
   /**

package/dist/client.js

@@ -7,7 +7,7 @@ import {
   log,
   parseCommandLineArgs,
   setupSignalHandlers
-} from "./chunk-VQ556LTN.js";
+} from "./chunk-LWDSICAM.js";
 
 // src/client.ts
 import { EventEmitter } from "events";

package/dist/proxy.js

@@ -8,7 +8,7 @@ import {
   mcpProxy,
   parseCommandLineArgs,
   setupSignalHandlers
-} from "./chunk-VQ556LTN.js";
+} from "./chunk-LWDSICAM.js";
 
 // src/proxy.ts
 import { EventEmitter } from "events";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-remote",
-  "version": "0.0.20",
+  "version": "0.0.21",
   "description": "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
   "keywords": [
     "mcp",