Skip to content

v0.3.0 - Remote Streaming HTTP Transport

Latest

Choose a tag to compare

@rorymcmahon rorymcmahon released this 01 Sep 07:00
8f66270

Highlights

Remote streaming HTTP transport

The server can now run as a remote HTTP service (MCP_TRANSPORT=streamable-http) behind a TLS reverse proxy, in addition to the default local stdio mode. Existing local installs are unaffected.

  • Static bearer-token auth (MCP_BEARER_TOKEN)
  • Per-client phpIPAM credentials via X-phpIPAM-* headers, with env-var fallback
  • Unauthenticated /health endpoint
  • Docker + Caddy deployment assets and an English DEPLOYMENT.md guide

New tool

  • search_hostname — search IP addresses by exact or partial hostname (supports * wildcards)

Changed

  • Result-limit ceilings raised from 50/100 to 1000 so full subnets can be retrieved (defaults unchanged)
  • Requires Python 3.10+
  • Dependency updates: mcp==1.28.1, requests==2.34.2, uvicorn[standard]>=0.34

Security

  • Container image hardened: base image pinned by digest, apt-get upgrade for the fixed OpenSSL, pinned/upgraded pip and setuptools
  • docker-compose.yml hardened: dropped Linux capabilities (Caddy keeps only NET_BIND_SERVICE), no-new-privileges, per-service healthchecks

Fixed

  • pylint CI now lints against pinned dependencies and correctly fails on error/fatal findings

Full changelog: see CHANGELOG.md.