rootly-mcp-server 2.2.1__tar.gz → 2.2.2__tar.gz

{rootly_mcp_server-2.2.1 → rootly_mcp_server-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rootly-mcp-server
-Version: 2.2.1
+Version: 2.2.2
 Summary: Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation
 Project-URL: Homepage, https://github.com/Rootly-AI-Labs/Rootly-MCP-server
 Project-URL: Issues, https://github.com/Rootly-AI-Labs/Rootly-MCP-server/issues

{rootly_mcp_server-2.2.1 → rootly_mcp_server-2.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "rootly-mcp-server"
-version = "2.2.1"
+version = "2.2.2"
 description = "Secure Model Context Protocol server for Rootly APIs with AI SRE capabilities, comprehensive error handling, and input validation"
 readme = "README.md"
 requires-python = ">=3.10"

{rootly_mcp_server-2.2.1 → rootly_mcp_server-2.2.2}/src/rootly_mcp_server/server.py

@@ -388,10 +388,15 @@ class AuthenticatedHTTPXClient:
 
         # ALWAYS ensure Content-Type and Accept headers are set correctly for Rootly API
         # This is critical because:
-        # 1. FastMCP may pass headers from the MCP client request (e.g., Content-Type: application/json)
-        # 2. Per-request headers override httpx client defaults
-        # 3. We must force JSON-API content type regardless of what's passed in
+        # 1. FastMCP's get_http_headers() returns LOWERCASE header keys (e.g., "content-type")
+        # 2. We must remove any existing content-type/accept and set the correct JSON-API values
+        # 3. Handle both lowercase and mixed-case variants to be safe
         headers = dict(kwargs.get("headers") or {})
+        # Remove any existing content-type and accept headers (case-insensitive)
+        headers_to_remove = [k for k in headers if k.lower() in ("content-type", "accept")]
+        for key in headers_to_remove:
+            del headers[key]
+        # Set the correct JSON-API headers
         headers["Content-Type"] = "application/vnd.api+json"
         headers["Accept"] = "application/vnd.api+json"
         kwargs["headers"] = headers

{rootly_mcp_server-2.2.1 → rootly_mcp_server-2.2.2}/tests/unit/test_http_headers.py

@@ -275,3 +275,44 @@ class TestFastMCPIntegrationScenario:
             call_kwargs = mock_httpx_client.request.call_args[1]
             assert call_kwargs["headers"]["Content-Type"] == "application/vnd.api+json"
             assert call_kwargs["headers"]["Accept"] == "application/vnd.api+json"
+
+    @pytest.mark.asyncio
+    async def test_lowercase_headers_removed_not_duplicated(self, mock_httpx_client):
+        """Test that lowercase headers from FastMCP are removed, not duplicated.
+
+        FastMCP's get_http_headers() returns lowercase keys like 'content-type'.
+        If we only SET 'Content-Type' without removing 'content-type', the dict
+        would have BOTH keys, causing the 415 error on the hosted server.
+
+        This is the ROOT CAUSE of the 415 error that only happens on hosted MCP:
+        - Local (stdio): No HTTP request context, get_http_headers() returns {}
+        - Hosted (SSE): HTTP request context exists, get_http_headers() returns lowercase headers
+        """
+        from rootly_mcp_server.server import AuthenticatedHTTPXClient
+
+        with patch.object(AuthenticatedHTTPXClient, "_get_api_token", return_value="test-token"):
+            client = AuthenticatedHTTPXClient()
+            client.client = mock_httpx_client
+
+            # FastMCP returns lowercase header keys from get_http_headers()
+            fastmcp_headers = {
+                "content-type": "application/json",  # lowercase from FastMCP!
+                "accept": "application/json",  # lowercase from FastMCP!
+                "authorization": "Bearer token",
+            }
+
+            await client.request("GET", "/v1/teams", headers=fastmcp_headers)
+
+            call_kwargs = mock_httpx_client.request.call_args[1]
+            headers = call_kwargs["headers"]
+
+            # Should have correct Content-Type (mixed case)
+            assert headers["Content-Type"] == "application/vnd.api+json"
+            assert headers["Accept"] == "application/vnd.api+json"
+
+            # Should NOT have lowercase duplicates - this is the key assertion!
+            assert "content-type" not in headers, "lowercase content-type should be removed"
+            assert "accept" not in headers, "lowercase accept should be removed"
+
+            # Other headers should be preserved
+            assert headers["authorization"] == "Bearer token"