[PR #273] [FEAT](utils): ADD HEADERS FW to tools #232

New issue

Open

opened 2026-10-18 21:12:53 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-18 21:12:53 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/mcpo/pull/273
Author: @GlisseManTV
Created: 12/8/2025
Status: 🔄 Open

Base: dev ← Head: dev

📝 Commits (10+)

0399dbc fix: update logging level from debug to info in header filtering
640bdae Delete .github/workflows/publish.yaml
1f70ada Update main.py
5a7983d Update main.py
e5f0bbb fix: refactor meta handling in tool endpoint calls
740d90a fix: update header key name in tool handler
300dbdc feat(utils): add masking of sensitive headers in logs
4026879 feat(utils): remove unused mask_sensitive_headers and update logging
6dafbe1 feat(utils): mask sensitive headers in logs to prevent leak
e668894 feat(mcpo): log raw args instead of masked args in endpoint calls

📊 Changes

3 files changed (+193 additions, -16 deletions)

View changed files

📝 .github/workflows/docker-build.yaml (+1 -0)
➕ src/mcpo/CLIENT_HEADER_FORWARDING.md (+151 -0)
📝 src/mcpo/utils/main.py (+41 -16)

📄 Description

Pull Request Checklist

Before submitting, make sure you've checked the following:

Target branch: Please verify that the pull request targets the dev branch.
Description: Provide a concise description of the changes made in this pull request.
Changelog: Ensure a changelog entry following the format of Keep a Changelog is added at the bottom of the PR description.
Dependencies: Are there any new dependencies? Have you updated the dependency versions in the documentation?
Testing: Have you written and run sufficient tests to validate the changes?
Code review: Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards?
Prefix: To clearly categorize this pull request, prefix the pull request title using one of the following:
- BREAKING CHANGE: Significant changes that may affect compatibility
- build: Changes that affect the build system or external dependencies
- ci: Changes to our continuous integration processes or workflows
- chore: Refactor, cleanup, or other non-functional code changes
- docs: Documentation update or addition
- feat: Introduces a new feature or enhancement to the codebase
- fix: Bug fix or error correction
- i18n: Internationalization or localization changes
- perf: Performance improvement
- refactor: Code restructuring for better maintainability, readability, or scalability
- style: Changes that do not affect the meaning of the code (white space, formatting, missing semi-colons, etc.)
- test: Adding missing tests or correcting existing tests
- WIP: Work in progress, a temporary label for incomplete or ongoing work

Changelog Entry

Description

Add headers forwarding through mcpo.
using a custom arg "mcpo_headers" pushed in arguments list.
Adding a function to mask headers in logs.

Added

Header forwarding
Function to hide sensitive headers in logs

Changed

_meta to "mcpo_headers"

Deprecated

[List any deprecated functionality or features that have been removed]

Removed

_meta mention in utils/main.py

Fixed

[List any fixes, corrections, or bug fixes]

Security

Hide sensitive headers in logs

Breaking Changes

BREAKING CHANGE: tools must use "mcpo_headers" to find auth headers

Additional Information

[Insert any additional context, notes, or explanations for the changes]
- [Reference any related issues, commits, or other relevant information]

Screenshots or Videos

[Attach any relevant screenshots or videos demonstrating the changes]

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/mcpo/pull/273 **Author:** [@GlisseManTV](https://github.com/GlisseManTV) **Created:** 12/8/2025 **Status:** 🔄 Open **Base:** `dev` ← **Head:** `dev` --- ### 📝 Commits (10+) - [`0399dbc`](https://github.com/open-webui/mcpo/commit/0399dbc822c3496b18fc71593ce312c3dce7fccb) fix: update logging level from debug to info in header filtering - [`640bdae`](https://github.com/open-webui/mcpo/commit/640bdaea3eac85c1416e72183c8f223c7b6a80cd) Delete .github/workflows/publish.yaml - [`1f70ada`](https://github.com/open-webui/mcpo/commit/1f70ada93a8e3070efc6881337afe9e47311e469) Update main.py - [`5a7983d`](https://github.com/open-webui/mcpo/commit/5a7983d8e5a60a4326231f3bdc5489d2bbf7962b) Update main.py - [`e5f0bbb`](https://github.com/open-webui/mcpo/commit/e5f0bbb441c9f79c46eb4aa5d118970bf7e797c0) fix: refactor meta handling in tool endpoint calls - [`740d90a`](https://github.com/open-webui/mcpo/commit/740d90ae087f2a91989bef01db771dbbc23a3cf3) fix: update header key name in tool handler - [`300dbdc`](https://github.com/open-webui/mcpo/commit/300dbdc518fcde01e2ebcc488f8bcf60a79facc4) feat(utils): add masking of sensitive headers in logs - [`4026879`](https://github.com/open-webui/mcpo/commit/4026879b90cfaa39f6de172d15773d97cfe38500) feat(utils): remove unused mask_sensitive_headers and update logging - [`6dafbe1`](https://github.com/open-webui/mcpo/commit/6dafbe17f5fd37e2f62c85d764980e381ac364d4) feat(utils): mask sensitive headers in logs to prevent leak - [`e668894`](https://github.com/open-webui/mcpo/commit/e668894bdd26d787e5041ea5e7847ca04e5f996a) feat(mcpo): log raw args instead of masked args in endpoint calls ### 📊 Changes **3 files changed** (+193 additions, -16 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/docker-build.yaml` (+1 -0) ➕ `src/mcpo/CLIENT_HEADER_FORWARDING.md` (+151 -0) 📝 `src/mcpo/utils/main.py` (+41 -16) </details> ### 📄 Description # Pull Request Checklist **Before submitting, make sure you've checked the following:** - [X] **Target branch:** Please verify that the pull request targets the `dev` branch. - [X] **Description:** Provide a concise description of the changes made in this pull request. - [X] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description. - [X] **Dependencies:** Are there any new dependencies? Have you updated the dependency versions in the documentation? - [X] **Testing:** Have you written and run sufficient tests to validate the changes? - [X] **Code review:** Have you performed a self-review of your code, addressing any coding standard issues and ensuring adherence to the project's coding standards? - [x] **Prefix:** To clearly categorize this pull request, prefix the pull request title using one of the following: - **BREAKING CHANGE**: Significant changes that may affect compatibility - **build**: Changes that affect the build system or external dependencies - **ci**: Changes to our continuous integration processes or workflows - **chore**: Refactor, cleanup, or other non-functional code changes - **docs**: Documentation update or addition - **feat**: Introduces a new feature or enhancement to the codebase - **fix**: Bug fix or error correction - **i18n**: Internationalization or localization changes - **perf**: Performance improvement - **refactor**: Code restructuring for better maintainability, readability, or scalability - **style**: Changes that do not affect the meaning of the code (white space, formatting, missing semi-colons, etc.) - **test**: Adding missing tests or correcting existing tests - **WIP**: Work in progress, a temporary label for incomplete or ongoing work # Changelog Entry ### Description - Add headers forwarding through mcpo. using a custom arg "mcpo_headers" pushed in arguments list. Adding a function to mask headers in logs. ### Added - Header forwarding - Function to hide sensitive headers in logs ### Changed - _meta to "mcpo_headers" ### Deprecated - [List any deprecated functionality or features that have been removed] ### Removed - _meta mention in utils/main.py ### Fixed - [List any fixes, corrections, or bug fixes] ### Security - Hide sensitive headers in logs ### Breaking Changes - **BREAKING CHANGE**: tools must use "mcpo_headers" to find auth headers --- ### Additional Information - [Insert any additional context, notes, or explanations for the changes] - [Reference any related issues, commits, or other relevant information] ### Screenshots or Videos - [Attach any relevant screenshots or videos demonstrating the changes] --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi added the

pull-request

label

2026-10-18 21:12:53 +00:00