Repository navigation
Highlights
Remote streaming HTTP transport
The server can now run as a remote HTTP service (MCP_TRANSPORT=streamable-http) behind a TLS reverse proxy, in addition to the default local stdio mode. Existing local installs are unaffected.
- Static bearer-token auth (
MCP_BEARER_TOKEN) - Per-client phpIPAM credentials via
X-phpIPAM-*headers, with env-var fallback - Unauthenticated
/healthendpoint - Docker + Caddy deployment assets and an English
DEPLOYMENT.mdguide
New tool
search_hostname— search IP addresses by exact or partial hostname (supports*wildcards)
Changed
- Result-limit ceilings raised from 50/100 to 1000 so full subnets can be retrieved (defaults unchanged)
- Requires Python 3.10+
- Dependency updates:
mcp==1.28.1,requests==2.34.2,uvicorn[standard]>=0.34
Security
- Container image hardened: base image pinned by digest,
apt-get upgradefor the fixed OpenSSL, pinned/upgraded pip and setuptools docker-compose.ymlhardened: dropped Linux capabilities (Caddy keeps onlyNET_BIND_SERVICE),no-new-privileges, per-service healthchecks
Fixed
- pylint CI now lints against pinned dependencies and correctly fails on error/fatal findings
Full changelog: see CHANGELOG.md.