PrefectHQ/fastmcp v3.4.6

v3.4.6: Trust, but Proxy

on GitHub

FastMCP 3.4.6 backports trusted-proxy support for SSRF-protected OAuth metadata and JWKS fetches. Deployments can now route these requests through a mandated corporate proxy while preserving custom CA certificates; FastMCP refuses the fetch when no proxy is configured instead of risking an unprotected direct request.

What's Changed

Fixes 🐞

• Backport #4412 to 3.x: support trusted SSRF proxies by @jlowin in #4755

Docs 📚

• Docs: add v3.4.6 changelog entries by @jlowin in #4761

Full Changelog: v3.4.5...v3.4.6