Spaces:

burtenshaw
/

hf-bucket-mcp

Running

Accept Hugging Face bearer tokens

by evalstate HF Staff - opened Apr 28

←

Apr 28

Keep the OAuth proxy flow for interactive MCP clients, but wrap it in FastMCP MultiAuth so ordinary Hugging Face bearer tokens are also accepted.

This lets proxy/loaders that already have an HF_TOKEN perform initialize/tools/list against /mcp without completing the Space-local OAuth flow.

Also fixes remote auth metadata to advertise this Space as the protected resource while using huggingface.co as the authorization server.

Apr 28

Superseded by discussion #4, which contains the combined auth and proxy app upload fix.

evalstate changed pull request status to closed Apr 28

evalstate changed pull request status to open Apr 28

Apr 28

Reopening this auth-only PR. The proxy-side fix removes the need to expose the hashed FastMCP app backend action as a normal tool.

burtenshaw changed pull request status to merged Apr 28

Upload images, audio, and videos by dragging in the text input, pasting, or clicking here.

Tap or paste here to upload images

· Sign up or log in to comment