mirror of
https://github.com/hansjone/netx.git
synced 2026-10-18 05:20:47 +08:00
oliver
52679a7cfc
- netx_api/mcp_remote: ops / topology / bizMonitor tools, Bearer auth, per-tool RBAC filtering, ?groups= filter, readOnlyHint and group meta. - Mount the official MCP Streamable HTTP app at /mcp (stateless); AuthAuditMiddleware is pure ASGI and skips /mcp. - Let uvicorn chunk MCP responses; some Windows LSPs rewrite Content-Length replies on */mcp* paths into broken chunked framing. - NETX_MCP_ALLOWED_HOSTS opts into DNS-rebinding checks (off by default so LAN and reverse-proxy hosts work; Bearer is the gate). - Remove the three stdio Python MCP packages; tests moved to /mcp, including real-TCP framing regressions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 lines
631 B
JSON
26 lines
631 B
JSON
{
|
|
"source_type": "remote",
|
|
"source_ref": "netx-remote-mcp",
|
|
"server_id": "netx-topology",
|
|
"version": "0.4.19",
|
|
"transport": "http",
|
|
"url": "http://127.0.0.1:8890/mcp?groups=topology",
|
|
"headers": {
|
|
"Authorization": "Bearer ${NETX_API_TOKEN}"
|
|
},
|
|
"env_schema": {
|
|
"NETX_API_TOKEN": {
|
|
"type": "string",
|
|
"description": "Bearer token (MCP token file or user JWT)"
|
|
},
|
|
"NETX_LANG": {
|
|
"type": "string",
|
|
"description": "Response language hint: zh or en",
|
|
"default": "zh"
|
|
}
|
|
},
|
|
"required_permissions": [],
|
|
"risk_level": "medium",
|
|
"enabled": true,
|
|
"timeout_s": 120
|
|
}
|