unifi-network-mcp 0.3.3__tar.gz → 0.4.1__tar.gz

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: unifi-network-mcp
-Version: 0.3.3
+Version: 0.4.1
 Summary: Unifi Network MCP Server
 License-File: LICENSE
 Requires-Python: >=3.13
 Requires-Dist: aiohttp>=3.8.5
 Requires-Dist: aiounifi>=88
 Requires-Dist: jsonschema>=4.17.0
-Requires-Dist: mcp[cli]>=1.21.2
+Requires-Dist: mcp[cli]>=1.23.0
 Requires-Dist: omegaconf>=2.3.0
 Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: pyyaml>=6.0
@@ -538,6 +538,7 @@ The server merges settings from **environment variables**, an optional `.env` fi
 | `UNIFI_TOOL_REGISTRATION_MODE` | Tool loading mode: `lazy` (default), `eager`, or `meta_only`. See [Context Optimization](#context-optimization) |
 | `UNIFI_ENABLED_CATEGORIES` | Comma-separated list of tool categories to load (eager mode). See table below |
 | `UNIFI_ENABLED_TOOLS` | Comma-separated list of specific tool names to register (eager mode) |
+| `UNIFI_MCP_ALLOWED_HOSTS` | Comma-separated list of allowed hostnames for reverse proxy support. Required when running behind Nginx/Cloudflare/etc. Default `localhost,127.0.0.1` |
 
 ### Tool Categories (for UNIFI_ENABLED_CATEGORIES)
 
@@ -809,6 +810,7 @@ See [docs/permissions.md](docs/permissions.md) for complete documentation includ
 * **Review permissions carefully** before enabling high-risk operations. Use environment variables for runtime control.
 * Create, update, and delete tools should be used with caution and only enabled when necessary.
 * Do not host outside of your network unless using a secure reverse proxy like Cloudflare Tunnel or Ngrok. Even then, an additional layer of authentication is recommended.
+* **Reverse Proxy Configuration:** When running behind a reverse proxy, set `UNIFI_MCP_ALLOWED_HOSTS` to include your external domain (e.g., `localhost,127.0.0.1,unifi-mcp.example.com`) to bypass FastMCP's DNS rebinding protection.
 
 ---
 

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/README.md

@@ -522,6 +522,7 @@ The server merges settings from **environment variables**, an optional `.env` fi
 | `UNIFI_TOOL_REGISTRATION_MODE` | Tool loading mode: `lazy` (default), `eager`, or `meta_only`. See [Context Optimization](#context-optimization) |
 | `UNIFI_ENABLED_CATEGORIES` | Comma-separated list of tool categories to load (eager mode). See table below |
 | `UNIFI_ENABLED_TOOLS` | Comma-separated list of specific tool names to register (eager mode) |
+| `UNIFI_MCP_ALLOWED_HOSTS` | Comma-separated list of allowed hostnames for reverse proxy support. Required when running behind Nginx/Cloudflare/etc. Default `localhost,127.0.0.1` |
 
 ### Tool Categories (for UNIFI_ENABLED_CATEGORIES)
 
@@ -793,6 +794,7 @@ See [docs/permissions.md](docs/permissions.md) for complete documentation includ
 * **Review permissions carefully** before enabling high-risk operations. Use environment variables for runtime control.
 * Create, update, and delete tools should be used with caution and only enabled when necessary.
 * Do not host outside of your network unless using a secure reverse proxy like Cloudflare Tunnel or Ngrok. Even then, an additional layer of authentication is recommended.
+* **Reverse Proxy Configuration:** When running behind a reverse proxy, set `UNIFI_MCP_ALLOWED_HOSTS` to include your external domain (e.g., `localhost,127.0.0.1,unifi-mcp.example.com`) to bypass FastMCP's DNS rebinding protection.
 
 ---
 

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/pyproject.toml

@@ -5,7 +5,7 @@ description = "Unifi Network MCP Server"
 readme = "README.md"
 requires-python = ">=3.13"
 dependencies = [
-    "mcp[cli]>=1.21.2",
+    "mcp[cli]>=1.23.0",
     "aiohttp>=3.8.5",
     "aiounifi>=88",
     "pyyaml>=6.0",

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/src/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '0.3.3'
-__version_tuple__ = version_tuple = (0, 3, 3)
+__version__ = version = '0.4.1'
+__version_tuple__ = version_tuple = (0, 4, 1)
 
 __commit_id__ = commit_id = None

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/src/main.py

@@ -335,9 +335,13 @@ async def main_async():
         async def run_http():
             try:
                 logger.info(f"Starting FastMCP HTTP SSE server on {host}:{port} ...")
-                # MCP SDK >= 1.10 (pinned to 1.13.1): configure host/port via settings
                 server.settings.host = host
                 server.settings.port = port
+
+                # Disable uvicorn access logging to prevent stdout conflicts
+                # when running alongside stdio transport
+                logging.getLogger("uvicorn.access").disabled = True
+
                 await server.run_sse_async()
                 logger.info("HTTP SSE started via run_sse_async() using server.settings host/port.")
             except Exception as http_e:

{unifi_network_mcp-0.3.3 → unifi_network_mcp-0.4.1}/src/runtime.py

@@ -14,10 +14,12 @@ Lazy factories (`get_*`) are provided so unit tests can substitute fakes by
 monkey‑patching before the first call.
 """
 
+import os
 from functools import lru_cache
 from typing import Any
 
 from mcp.server.fastmcp import FastMCP
+from mcp.server.transport_security import TransportSecuritySettings
 
 from src.bootstrap import load_config, logger
 from src.managers.client_manager import ClientManager
@@ -50,7 +52,21 @@ def get_config():
 @lru_cache
 def get_server() -> FastMCP:
     """Create the FastMCP server instance exactly once."""
-    return FastMCP(name="unifi-network-mcp", debug=True)
+    # Parse allowed hosts from environment variable for reverse proxy support
+    # Default to localhost only for backwards compatibility
+    allowed_hosts_str = os.getenv("UNIFI_MCP_ALLOWED_HOSTS", "localhost,127.0.0.1")
+    allowed_hosts = [h.strip() for h in allowed_hosts_str.split(",") if h.strip()]
+
+    # Configure transport security settings
+    transport_security = TransportSecuritySettings(allowed_hosts=allowed_hosts)
+
+    logger.debug(f"Configuring FastMCP with allowed_hosts: {allowed_hosts}")
+
+    return FastMCP(
+        name="unifi-network-mcp",
+        debug=True,
+        transport_security=transport_security,
+    )
 
 
 # ---------------------------------------------------------------------------