fix: harden server reliability and OAuth security

2026-08-21 17:19:13 +09:00
parent b2aab2c520
commit 080030c764
16 changed files with 946 additions and 100 deletions
@@ -3,8 +3,9 @@ MCP_HOST=0.0.0.0
 MCP_PORT=3000
 MCP_ENDPOINT=/mcp
 MCP_PUBLIC_URL=https://mcp.example.com
+MCP_TRUST_PROXY_HOPS=0

-# Authentication. A token is required unless MCP_ALLOW_NO_AUTH=true.
+# Static bearer authentication. OAuth can instead use MCP_OAUTH_APPROVAL_KEY.
 MCP_AUTH_TOKEN=replace-with-a-long-random-token
 MCP_ALLOW_NO_AUTH=false