Skip to content

ServerFS MCP v0.4.0

Choose a tag to compare

View all tags
@NTLx NTLx released this 21 Sep 15:24
· 38 commits to main since this release
v0.4.0
0117f09

ServerFS MCP v0.4.0

This release adds bounded binary file transfer and hardens the Streamable HTTP transport while preserving the opt-in Agent Bridge deployment model.

Highlights

  • Optional bounded whole-file download_binary_file and upload_binary_file tools, disabled by default. Uploads require a writable workdir; overwrite is limited to one existing regular file and requires an expected revision.
  • Binary downloads return the raw bytes together with size, MIME, SHA-256, and revision metadata. The download output schema is now exposed correctly for MCP clients.
  • Global workdir policy defaults and per-workdir overrides are resolved into one effective policy, including binary-transfer and Agent settings. The existing Agent Bridge remains optional; the base compose.yml stays Agent-free, while Agent deployments use compose.yml with the explicit compose.agent.yml overlay.
  • Streamable HTTP transport security now explicitly enables DNS-rebinding protection, accepts only the fixed internal Host serverfs-mcp:8000, and rejects non-empty unapproved Origins before MCP dispatch. Docker internal networking and the unpublished port remain additional layers.

Issue 10 transport-security concern was validated through regression coverage and the protected OpenAI Secure MCP Tunnel path. See the repository documentation for the full deployment and acceptance details.

Assets 2
Loading