FastMCP 3.4.4 restores HTTP deployment compatibility after the 3.4.3 Host/Origin guard changed default behavior for existing ASGI, serverless, and reverse-proxy deployments. The guard implementation remains available for deployments that opt in with explicit trusted hosts and origins, while 3.x returns to accepting traffic that worked before the patch. This release also adds Hugging Face OAuth provider support, with docs and examples for public and private apps, PKCE, Dynamic Client Registration, and CIMD.
What's Changed
Enhancements ✨
- Hugging Face Auth Integration by @evalstate in #4385
Fixes 🐞
- Relax host origin guard defaults by @jlowin in #4439
- Restore HTTP host guard compatibility by @jlowin in #4472
Docs 📚
New Contributors
- @evalstate made their first contribution in #4385
Full Changelog: v3.4.3...v3.4.4