6 Commits

Include renames

Author	SHA1	Message	Date
woggioni	827549c0ec	revert: remove file-based configuration and multi-spec support ... This reverts commit 9185b5fa05 while preserving the build work done afterwards: setuptools-scm versioning with uv cache keys, the git-enabled Docker builder (full checkout, credentials excluded), and full-history/tag checkout in CI. Configuration returns to environment variables with a single OpenAPI document; .env.example and the env-based Docker/Compose setup are restored.	2026-10-22 04:54:47 +00:00
woggioni	9185b5fa05	feat!: file-based configuration and multiple OpenAPI specs ... Configuration moves from environment variables to a YAML/JSON file, located via --config, XMCP_CONFIG, or /etc/xmcp/xmcp.yml. String values support ${VAR} interpolation for secrets. One or more OpenAPI documents can be configured as specs[]; multiple documents are mounted under unique namespaces and served on a single transport, on one HTTP port. Tool filters, per-request API keys and per-spec base URL/auth overrides live in the same file. The Docker image no longer sets MCP_* defaults and expects the config mounted at /etc/xmcp/xmcp.yml; the healthcheck reads the config.	2026-10-22 01:56:10 +00:00
woggioni	321996f436	feat: filter tools by OpenAPI tag via MCP_TOOLS_TAGS_INCLUDED ... Adds a comma-separated tag allowlist alongside the existing name allowlist. When both are configured a tool must match both (AND). Unknown names/tags are ignored with a startup warning, and a filter that resolves to nothing exposes no tools rather than falling back to all of them. Startup logs the active filters and the exposed tools.	2026-10-19 09:13:00 +00:00
woggioni	3ec12439b4	feat: add optional tools allowlist via MCP_TOOLS_INCLUDED ... When MCP_TOOLS_INCLUDED is set to a comma-separated list of tool names, only those tools are exposed (tools/list and calls); unset or empty exposes every generated tool. Unknown names are ignored with a startup warning and the active selection is logged at startup.	2026-10-19 07:24:41 +00:00
woggioni	363a1bee69	feat: accept per-client API keys from an HTTP header ... When serving over HTTP, the key sent in the MCP_API_KEY_HEADER header (default X-API-Key) is used as the API credential for that request and takes precedence over the static API_TOKEN. The key is formatted with API_AUTH_HEADER/API_AUTH_SCHEME and the source header is stripped from the outgoing API request. Implemented as an httpx2 auth flow over FastMCP's request context, so concurrent clients stay isolated.	2026-10-19 06:12:58 +00:00
woggioni	d0fc0c1bc4	Initial commit: xmcp — OpenAPI-to-MCP server ... MCP server generated from an OpenAPI document with FastMCP v4. Configurable via env vars (spec URL/file, transport stdio/http, host, port, API token), built with uv, multi-stage Dockerfile with non-root runtime.	2026-10-19 02:34:04 +00:00