Skip to content

McpInspector resource should not disable token authentication #779

@timheuer

Description

@timheuer

Describe the bug

In the current McpInspector resource there is an environment variable that disables the authentication via DANGEROUSLY_OMIT_AUTH -- this is not best practice and we should not have that be the default.

Regression

No response

Steps to reproduce

Run the examples/mcp-inspector apphost project

Expected behavior

The resource should:

  • Provide a default token to the MCP_PROXY_AUTH_TOKEN environment variable before the resource starts
  • Enable a WithProxyToken method on the builder that would enable someone to pass in the value for that token as a password parameter
  • The dashboard URIs that are exposed would have the proxy token appended to them in the URI with a query string of the same name as the environment variable name

Screenshots

No response

IDE and version

VS 2022 Preview

IDE version

No response

Nuget packages


Additional context

No response

Help us help you

Yes, I'd like to be assigned to work on this item

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions