modulector-sdk 2.4.0__tar.gz → 2.5.2__tar.gz

{modulector_sdk-2.4.0/src/modulector_sdk.egg-info → modulector_sdk-2.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modulector-sdk
-Version: 2.4.0
+Version: 2.5.2
 Summary: Typed Python SDK for the Modulector API.
 Author: omicsdatascience
 License-Expression: MIT
@@ -101,6 +101,9 @@ disease associations, drug associations, and PubMed news subscriptions. Use
 `MODULECTOR_API_BASE_URL` or each tool's `base_url` argument to target a custom
 Modulector deployment.
 
+When deployed with the root Docker Compose stack, nginx proxies the MCP
+Streamable HTTP endpoint at `https://<mydomain.com>/mcp`.
+
 ## Development
 
 Build this SDK from the `sdk/` directory:

{modulector_sdk-2.4.0 → modulector_sdk-2.5.2}/README.md

@@ -70,6 +70,9 @@ disease associations, drug associations, and PubMed news subscriptions. Use
 `MODULECTOR_API_BASE_URL` or each tool's `base_url` argument to target a custom
 Modulector deployment.
 
+When deployed with the root Docker Compose stack, nginx proxies the MCP
+Streamable HTTP endpoint at `https://<mydomain.com>/mcp`.
+
 ## Development
 
 Build this SDK from the `sdk/` directory:

{modulector_sdk-2.4.0 → modulector_sdk-2.5.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "modulector-sdk"
-version = "2.4.0"
+version = "2.5.2"
 description = "Typed Python SDK for the Modulector API."
 readme = "README.md"
 requires-python = ">=3.10"

{modulector_sdk-2.4.0 → modulector_sdk-2.5.2}/src/modulector_sdk/mcp_server.py

@@ -3,9 +3,12 @@
 from __future__ import annotations
 
 import argparse
+import os
 from typing import Any, Final, Literal, TypeVar, cast
+from urllib.parse import urlparse
 
 from mcp.server.fastmcp import FastMCP
+from mcp.server.transport_security import TransportSecuritySettings
 
 from . import services
 from .utils import PaginatedResponse
@@ -21,11 +24,15 @@ SERVER_INSTRUCTIONS: Final[str] = (
     "paginated tools with explicit identifiers. The returned data comes from "
     "the configured Modulector API deployment."
 )
+PUBLIC_BASE_URL: Final[str] = os.getenv(
+    "MODULECTOR_PUBLIC_BASE_URL",
+    services.MODULECTOR_API_BASE_URL,
+)
 
 mcp = FastMCP(
     name="modulector",
     instructions=SERVER_INSTRUCTIONS,
-    website_url=services.MODULECTOR_API_BASE_URL,
+    website_url=PUBLIC_BASE_URL,
 )
 
 
@@ -48,6 +55,7 @@ def about_modulector() -> str:
         "miRNA-drug associations, and Illumina Infinium MethylationEPIC 2.0 "
         "site annotations.\n\n"
         f"Default API base URL: `{services.MODULECTOR_API_BASE_URL}`\n\n"
+        f"Public website URL: `{PUBLIC_BASE_URL}`\n\n"
         "Use the finder tools for partial identifiers, then query detail or "
         "paginated tools with exact miRNA, gene, disease, drug, or methylation "
         "site filters."
@@ -135,10 +143,13 @@ def get_mirna_details(
     :return: miRNA detail record.
     """
 
-    return services.get_mirna_details(
-        mirna,
-        base_url=_base_url(base_url),
-        timeout=timeout,
+    return cast(
+        dict[str, Any],
+        services.get_mirna_details(
+            mirna,
+            base_url=_base_url(base_url),
+            timeout=timeout,
+        ),
     )
 
 
@@ -308,10 +319,13 @@ def get_methylation_details(
     :return: Methylation site detail record.
     """
 
-    return services.get_methylation_details(
-        methylation_site,
-        base_url=_base_url(base_url),
-        timeout=timeout,
+    return cast(
+        dict[str, Any],
+        services.get_methylation_details(
+            methylation_site,
+            base_url=_base_url(base_url),
+            timeout=timeout,
+        ),
     )
 
 
@@ -400,6 +414,7 @@ def main() -> None:
         mcp.settings.host = args.host
         mcp.settings.port = args.port
         mcp.settings.json_response = args.json_response
+        _configure_http_transport_security()
     mcp.run(transport=transport)
 
 
@@ -447,6 +462,63 @@ def _base_url(base_url: str | None) -> str:
     return base_url or services.MODULECTOR_API_BASE_URL
 
 
+def _configure_http_transport_security() -> None:
+    """Configure DNS rebinding protection for HTTP MCP transports.
+
+    :return: None.
+    """
+
+    mcp.settings.transport_security = TransportSecuritySettings(
+        allowed_hosts=_allowed_hosts(),
+        allowed_origins=_allowed_origins(),
+    )
+
+
+def _allowed_hosts() -> list[str]:
+    """Return allowed Host headers for the MCP HTTP transport.
+
+    :return: Host header allow-list.
+    """
+
+    configured_hosts = _csv_env("MODULECTOR_MCP_ALLOWED_HOSTS")
+    if configured_hosts:
+        return configured_hosts
+
+    parsed_public_url = urlparse(PUBLIC_BASE_URL)
+    public_host = parsed_public_url.netloc
+    hosts = ["127.0.0.1:*", "localhost:*", "[::1]:*"]
+    if public_host:
+        hosts.append(public_host)
+    return hosts
+
+
+def _allowed_origins() -> list[str]:
+    """Return allowed Origin headers for the MCP HTTP transport.
+
+    :return: Origin header allow-list.
+    """
+
+    configured_origins = _csv_env("MODULECTOR_MCP_ALLOWED_ORIGINS")
+    if configured_origins:
+        return configured_origins
+
+    parsed_public_url = urlparse(PUBLIC_BASE_URL)
+    origins = ["http://127.0.0.1:*", "http://localhost:*", "http://[::1]:*"]
+    if parsed_public_url.scheme and parsed_public_url.netloc:
+        origins.append(f"{parsed_public_url.scheme}://{parsed_public_url.netloc}")
+    return origins
+
+
+def _csv_env(name: str) -> list[str]:
+    """Return comma-separated environment variable values.
+
+    :param name: Environment variable name.
+    :return: Non-empty stripped values.
+    """
+
+    return [value.strip() for value in os.getenv(name, "").split(",") if value.strip()]
+
+
 def _page_to_dict(page: PaginatedResponse[T]) -> dict[str, Any]:
     """Convert a paginated SDK response into a JSON-serializable mapping.
 

{modulector_sdk-2.4.0 → modulector_sdk-2.5.2/src/modulector_sdk.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modulector-sdk
-Version: 2.4.0
+Version: 2.5.2
 Summary: Typed Python SDK for the Modulector API.
 Author: omicsdatascience
 License-Expression: MIT
@@ -101,6 +101,9 @@ disease associations, drug associations, and PubMed news subscriptions. Use
 `MODULECTOR_API_BASE_URL` or each tool's `base_url` argument to target a custom
 Modulector deployment.
 
+When deployed with the root Docker Compose stack, nginx proxies the MCP
+Streamable HTTP endpoint at `https://<mydomain.com>/mcp`.
+
 ## Development
 
 Build this SDK from the `sdk/` directory: