mcp-graylog 0.3.2

Fixes Graylog access token authentication.

• Sends access tokens as Basic Auth <token>:token, as required by Graylog.
• Keeps the X-Requested-By header fix released in v0.3.0.
• Retains native MCP 2.1 support instead of reverting to MCP 1.x.
• Updates the message search test fixture to match the current Graylog Search Scripting API response.

Thanks to @kostazol and @adacio for reporting, validating, and testing the authentication and CSRF failures in PRs #3 and #5.

mcp-graylog 0.3.1

Fixes Streamable HTTP 421 responses for deployments that use an external hostname or IP address.

• Adds explicit Host and Origin allowlists.
• Reads MCP_SERVER_* runtime settings from the environment and .env.
• Keeps DNS rebinding protection enabled by default with localhost-only values.
• Supports trusted proxy deployments that need to accept any host through MCP_SERVER_DNS_REBINDING_PROTECTION=false.

For a direct deployment, set MCP_SERVER_ALLOWED_HOSTS to the public hostname or IP, including the exposed port or the :* port wildcard.

mcp-graylog 0.3.0

Migrates mcp-graylog to MCP Python SDK 2.1 and the 2026-07-28 protocol revision.

• Replace FastMCP with MCPServer and report the application version.
• Pass Streamable HTTP settings through run(), as required by MCP SDK 2.x.
• Update tool schema checks and add an MCP 2 client round-trip test.
• Add uv.lock for reproducible development installs.

Validated with 68 tests, Ruff, mypy, stdio and Streamable HTTP smoke tests, package builds, and a Docker build.

mcp-graylog 0.2.1

Fixes Graylog search and aggregation requests that returned HTTP 400 when X-Requested-By was missing.

• Send X-Requested-By: mcp-graylog with Graylog API requests.
• Keep the MCP SDK on the compatible 1.x line because this project uses FastMCP.
• Add regression coverage for search and aggregate requests.

Validated with 67 tests, Ruff, mypy, package builds, and a Docker build.