Run a `tools/call` WITH the tasks opt-in bound (used to prove sync paths).

The upper bound for the poll backoff, in seconds. A server-advertised `pollIntervalMs` is a deliberate statement about how much load the serv

Read cached version info. Returns: Tuple of (cached_version, cache_timestamp) or (None, 0) if no cache.

Return the snapshot bound for ``task_id`` in the current context. Returns ``None`` if nothing is bound, or if the bound entry belongs to a di

Remove a component from unified storage. Args: key: The prefixed key of the component. Raises: KeyError: If

Redis hash of a leg's outstanding input requests, keyed by surfaced key. Scoped by leg number so a re-entered leg's fresh requests never collide

Convert Google GenAI response to CreateMessageResult (no tools).

Internal helper to remove tokens and their associations.

Issue a handshake-era `sampling/createMessage` request from a server. `Context` has no `sample()` — server-initiated sampling is not part of

Write the session's full dict back under its single key (no TTL).

Scan Goose config for MCP server extensions. Goose uses YAML (``~/.config/goose/config.yaml``) with a different schema — MCP servers are defi

Determine if an error should trigger a retry. Checks both the error itself and its ``__cause__``, since FastMCP wraps tool exceptions

Stash the proxy's ``RequestContext`` on a ``ProxyClient`` before a backend call. Every proxy component (tool, resource, template, prompt) must ca

Derive a stable store key from every `CacheKey` field. `CacheKey` is `(method, params_key, partition)`, where the coordinator has alr

Suppress all scanners that read real user config files.

The single "not found" error for missing, expired, or cross-scope ids. Uses one message for all three so a caller cannot probe another scope's ta

Resolve a PEP 695 ``type X = ...`` alias to its underlying value. ``get_origin()`` returns ``None`` for a ``TypeAliasType``, so an alias that

Schedule a component for background execution via Docket. Handles each component type's calling convention: - ``FunctionTool``: splats the a

Append query parameters to a URL while preserving existing parameters. The existing query string is appended to verbatim rather than decoded

Build a plain OAuth provider mounted at BASE_URL, optionally with a distinct issuer.

Call a tool by name with the given arguments. Use this to execute tools discovered via search_tools.

Call a single tool registered on this MCP server multiple times with a single request. Each call can include different arguments. Us

Handle OAuth callback and return the authorization code result.

Call the `tasks/cancel` handler within the given auth scope.

Clear all cached clients and force disconnect them.

Check whether the connected client supports a given MCP extension. Inspects the ``extensions`` extra field on ``ClientCapabilities``

Validate and coerce task arguments before any task state is created. Called by ``submit_to_docket`` up front, so invalid inputs raise before the

Collect a schema by name and recurse into its dependencies.

Compare two version strings. Args: a: First version string (or None). b: Second version string (or None). Returns: -

Create a styled HTML error page for OAuth errors. Args: error_title: The error title (e.g., "OAuth Error", "Authorization Failed")

Create a new function with the same code but without the specified parameters in annotations. This is used to exclude parameters from type a

Create logo HTML. Args: icon_url: Optional custom icon URL. If not provided, uses the FastMCP logo. alt_text: Alt text for the lo

Helper to create a FastMCP server with OpenAPIProvider.

Create an HTMLResponse with security headers. Adds X-Frame-Options: DENY to prevent clickjacking attacks per MCP security best practices.

Discover files, import modules, and extract components. This is the main entry point for filesystem-based discovery. Args: root: Roo

Run all scanners and return the combined results. Duplicate names across sources are preserved — callers can use :pyattr:`DiscoveredServer.qu

Invalidate the session — delete its one key and all of its state. After this the id no longer resolves through `get_session`. This is

Exchange authorization code for FastMCP-issued tokens. Implements the token factory pattern: 1. Retrieves upstream tokens from stored

Format server information according to the specified format. Args: mcp: The FastMCP instance format: Output format ("fastmcp" or

Format IP address for use in URL (bracket IPv6 addresses). IPv6 addresses must be bracketed in URLs to distinguish the address from the port

Get the latest version of FastMCP from PyPI, using cache when available. Args: include_prereleases: If True, include pre-release versions

Get all recorded notifications, optionally filtered by method.

Gets the OIDC configuration for the specified configuration URL. Args: config_url: The OIDC configuration URL strict:

Get resource by transformed URI with all transforms applied. Note: This method does NOT filter disabled components. The Server (FastM

Get resource template by transformed URI with all transforms applied. Note: This method does NOT filter disabled components. The Server

Get tool by transformed name with all transforms applied. Note: This method does NOT filter disabled components. The Server (FastMCP)

A client that answers each round automatically.

Return a spec that satisfies both this spec and other. Used by transforms to combine caller constraints with filter constraints. For

Check if a request is allowed.

Check if a string is a URL.

List tools available on an MCP server. Examples: fastmcp list http://localhost:8000/mcp fastmcp list server.py fastmcp li

Retrieve all prompts available on the server. This method automatically fetches all pages if the server paginates results, returning

Apply transforms to matching tools.

Validate FastMCP JWT by swapping for upstream token. This implements the token swap pattern: 1. Verify FastMCP JWT signature (proves

Load config from server_spec and apply CLI overrides. This consolidates the config parsing logic that was duplicated across run, inspect, and

Normalize a resource URL by removing query parameters and trailing slashes. RFC 8707 allows clients to include query parameters in resource URLs,

Implement retry logic for requests.

Apply rate limiting to requests.

Parse the OpenAPI schema into HTTP routes.

Extract the hash from a Prefab renderer URI, or None.

Read a resource by its URI. For static resources, provide the exact URI. For templated resources, provide the URI with templa

Registers all marked tools, resources, and prompts with the server. This method calls ``register_tools``, ``register_resources``, and

Register a component's callable with Docket for background execution. No-ops if ``task_config.mode`` is ``forbidden``. Function-backed components

Remove tool(s) from this provider's storage. Args: name: The tool name. version: If None, removes ALL versions. If sp

Replace the first occurrence of `key` in a URL's query string in place. Like `add_query_params`, this does not round-trip the query through `

Clear all recorded notifications.

Clear all session visibility rules. Use this to reset session visibility back to global defaults. Sends notifications to this sessio

Restore FastMCP attributes a non-forwarding sampler dropped entirely. `Tracer.start_span` builds the span from `SamplingResult.attributes`, not

Check if a URL has query parameters.

Bind the default verifier's audience to this server's resource URL. AuthKit with Resource Indicators (RFC 8707) mints tokens whose ``aud``

Determine if an issue should be closed for needing an MRE.