MCP client that delegates connection management to a Transport instance. The Client class is responsible for MCP protocol logic, while the T

Intermediate Representation for a single OpenAPI operation.

In-memory transport for FastMCP servers. This transport connects directly to a FastMCP server instance in the same Python process. It works w

OAuth provider that presents a DCR-compliant interface while proxying to non-DCR IDPs. Purpose ------- MCP clients expect OAuth providers

A Provider that represents an MCP application. Binds together entry-point tools (``@app.ui``), backend tools (``@app.tool``), and the Prefab

Transport implementation that connects to an MCP server via Streamable HTTP Requests.

Configuration for transforming a parent tool's argument. This class allows fine-grained control over how individual arguments are transformed

Azure (Microsoft Entra) OAuth provider for FastMCP. This provider implements Azure/Microsoft Entra ID authentication using the OAuth Proxy pa

JWT token verifier supporting both asymmetric (RSA/ECDSA) and symmetric (HMAC) algorithms. This verifier validates JWT tokens using various

Simple static token verifier for testing and development. This verifier validates tokens against a predefined dictionary of valid token

Provider for locally-defined components. Supports decorator-based registration (`@provider.tool`, `@provider.resource`, `@provider.prompt`) a

Transform that collapses all tools into discovery + execute meta-tools. Discovery tools are composable via the ``discovery_tools`` parameter.

Specification for filtering components by version. Used by transforms and providers to filter components to a specific version or version ran

Represents the request body for an HTTP operation in our IR.

AccessToken that includes all JWT claims.

Represents a single parameter for an HTTP operation in our IR.

Wrapper for prompt message with auto-serialization. Accepts any content - strings pass through, other types (dict, list, BaseModel) are JSON-

Internal tool registration info.

Context passed to auth check callables. Attributes: token: The current access token, or None if unauthenticated. component: The t

OAuth client provider for MCP servers with browser-based authentication. This class provides OAuth authentication for FastMCP clients by ope

Configuration for a FastMCP server. This configuration file allows you to specify all settings needed to run a FastMCP server in a declarativ

Provider that creates MCP components from an OpenAPI specification. Components are created eagerly during initialization by parsing the OpenAPI

Authentication provider for resource servers that verify tokens from known authorization servers. This provider composes a TokenVerifier with aut

Wrapper for resource content with optional MIME type and metadata. Accepts any value for content - strings and bytes pass through directly, o

Provider that wraps a FastMCP server. This provider enables mounting one FastMCP server onto another, exposing the mounted server's tools, re

Transport implementation that connects to an MCP server via Server-Sent Events.

Provides a way to transform a tool.

Configuration for Python environment setup.

OAuth 2.0 Token Introspection verifier (RFC 7662). This verifier validates opaque tokens by calling an OAuth 2.0 token introspection end

Composes an optional auth server with additional token verifiers. Use this when a single server needs to accept tokens from multiple sources.

Sets visibility state on matching components. Does NOT filter inline - just marks components with visibility state. Later transforms in the c

UNSAFE: Uses exec() for testing only. Never use in production.

OAuth provider that wraps OAuthProxy to provide configuration via an OIDC configuration URL. This provider makes it easier to add OAuth protectio

Canonical result type for resource reads. Provides explicit control over resource responses: multiple content items, per-item MIME types, and

Applies tool transformations to modify tool schemas. Wraps ToolTransformConfig to apply argument renames, schema changes, hidden arguments, a

Context object providing access to MCP capabilities. This provides a cleaner interface to MCP's RequestContext functionality. It gets injecte

Provider that discovers components from the filesystem. Scans a directory for Python files and registers any Tool, Resource, ResourceTemplate

Source for local Python files.

Base class for FastMCP tools, prompts, resources, and resource templates.

Helper class for returning images from tools.

CIMD document per draft-parecki-oauth-client-id-metadata-document. The client metadata document is a JSON document containing OAuth client me

Middleware that provides consistent error handling and logging. Catches exceptions, logs them appropriately, and converts them to proper MCP

Provider that scans directories and creates a SkillProvider per skill folder. This extends AggregateProvider to combine multiple SkillProviders i

Search transform using regex pattern matching. Tools are matched against their name, description, and parameter information using ``re.search

Configuration for MCP background task execution. Controls how a component handles task-augmented requests: - ``forbidden``: Component does n

Helper class for returning file data from tools.

Filters components by version range. When applied to a provider or server, components within the version range are visible, and unversioned c

UNSAFE: Uses exec() for testing only. Never use in production.

Token verifier for Clerk OAuth tokens. Clerk issues standard OIDC tokens. Verification uses the introspection endpoint (RFC 7662) as the prim

Client for DCR proxy with configurable redirect URI validation. This special client class is critical for the OAuth proxy to work correctly w

Transport for running Python scripts.

Transform that adds tools for listing and reading resources. Generates two tools: - `list_resources`: Lists all resources and templates -

A resource that defers data loading by wrapping a function. The function is only called when the resource is read, allowing for lazy loading

Helper class for returning audio from tools.

Represents response information in our IR.

Provider that exposes a single skill folder as MCP resources. Each skill folder must contain a main file (default: SKILL.md) and may contain

JWT verifier pre-configured for Azure AD / Microsoft Entra ID. Auto-configures JWKS URI, issuer, audience, and scope handling from your Azure

Token verifier with custom validation logic. This verifier delegates token validation to a user-provided callable. By default, it accepts all

Token verifier for Google OAuth tokens. Google OAuth tokens are opaque (not JWTs), so we verify them by calling Google's tokeninfo endpoint w

Keycloak authentication provider using Dynamic Client Registration (DCR). Requires Keycloak 26.6.0 or later, which includes the fix for DCR compa

Fallback used when MCP dependencies are not installed.

Middleware that implements rate limiting to prevent server abuse. Uses a token bucket algorithm by default, allowing for burst traffic while

MCP server configuration for stdio transport. This is the canonical configuration format for MCP servers using stdio transport.

Base transport for connecting to an MCP server via subprocess with stdio. This is a base class that can be subclassed for specific command-b

TTL-based in-memory cache for ``AccessToken`` objects. Features: - SHA-256 hashed cache keys (fixed size, regardless of token length). -

Error in tool operations.

Progress dependency that works in both server and worker contexts. In a Docket worker, delegates to the execution's Redis-backed progress (ob

Mapping configuration for HTTP routes to FastMCP component types.

Middleware that provides structured JSON logging for better log analysis. Outputs structured logs that are easier to parse and analyze with log

A class to represent the result of a bulk tool call. It extends CallToolResult to include information about the requested tool call.

A Provider that collects structured input via a Pydantic model. Define a model for the data you need, and ``FormInput`` generates a form from

Token verifier for GitHub OAuth tokens. GitHub OAuth tokens are opaque (not JWTs), so we verify them by calling GitHub's API to check if they

Middleware that sends periodic pings to keep client connections alive. Starts a background ping task on first message from each session. The task

Configuration for MCP App tools and resources. Controls how a tool or resource participates in the MCP Apps extension. On tools, ``resource_u

Prefixes component names with a namespace. - Tools: name → namespace_name - Prompts: name → namespace_name - Resources: protocol://path →

PropelAuth resource server provider using OAuth 2.1 token introspection. This provider validates access tokens via PropelAuth's introspection end

Middleware that implements automatic retry logic for failed requests. Retries requests that fail with transient errors, using exponential bac

Supabase metadata provider for DCR (Dynamic Client Registration). This provider implements Supabase Auth integration using metadata forwarding.

Stored upstream OAuth tokens from identity provider. These tokens are obtained from the upstream provider (Google, GitHub, etc.) and stored i

Complete Clerk OAuth provider for FastMCP. This provider makes it trivial to add Clerk OAuth protection to any FastMCP server. Provide your C

Descope metadata provider for DCR (Dynamic Client Registration). This provider implements Descope integration using metadata forwarding. This

Complete Google OAuth provider for FastMCP. This provider makes it trivial to add Google OAuth protection to any FastMCP server. Just provide

OAuth transaction state for consent flow. Stored server-side to track active authorization flows with client context. Includes CSRF tokens fo

Transform that adds tools for listing and getting prompts. Generates two tools: - `list_prompts`: Lists all prompts - `get_prompt`: Gets

A proxy client that forwards advanced interactions between a remote MCP server and the proxy's connected clients. Supports forwarding roots, samp

Content Security Policy for MCP App resources. Declares which external origins the app is allowed to connect to or load resources from. Host

A simple provider that returns a configurable list of tools.

Error when authorization check fails.

Client authorization code with PKCE and upstream tokens. Stored server-side after upstream IdP callback. Contains the upstream tokens bound t

A resource that reads from a file. Set is_binary=True to read file as binary data instead of text.

A Provider that adds file upload capabilities to a server. Registers a drag-and-drop UI tool, a backend storage tool, and model-visible tools

Sandbox provider backed by `pydantic-monty`. Args: limits: Resource limits for sandbox execution. Supported keys: ``max_durat

Canonical result type for prompt rendering. Provides explicit control over prompt responses: multiple messages, roles, and metadata at both t

Builds httpx.Request objects from HTTPRoute and arguments using openapi-core.

Middleware that limits the response size of tool calls. Intercepts tool call responses and enforces size limits. If a response exceeds the li

Scalekit resource server provider for OAuth 2.1 authentication. This provider implements Scalekit integration using resource server pattern.