fastmcp · Issues· 334 open

`ssrf_safe_fetch` tries resolved addresses in a random, per-process order

Tool returning `nan` or `inf` silently comes back as `null`

GoogleTokenVerifier sends the access token in the tokeninfo URL, so HTTP client INFO logs expose it

Tasks: a poll refreshes the routing keys and the snapshot, but not the stored arguments

Additional Examples

Allow AuthCheck to inspect invocation details for resource-level authorization

set_sampling_callback and set_elicitation_callback don't update live session

bug: search transform proxy tools (call_read_tool, call_write_tool, call_delete_tool) missing 'description' field alongside missing 'title'

Consider linking Hexum hosted MCP for smaller coding-agent context

Data-backed File URIs misinterpret reserved characters in names

from_fastapi: tuple responses containing a model fail with an unresolved schema reference

client.set_roots and send_roots_list_changed not update the roots

FileSystemProvider should expose original discovery failures after initialization

Context.session_id changes on every tool call in 4.x, breaking session state

Resource-template query values include URI fragments