MCP SSE Security

Harden an MCP SSE server with localhost binding, bearer-token auth, and origin validation

SecurityConfig locks down an MCP SSE server with localhost-only binding, bearer-token authentication, and Origin validation.

Quick Start

1. Bind to localhost only

   SecurityConfig defaults to bind_localhost_only=True. Pass its recommended bind address to run_sse.

   from praisonaiagents.mcp import ToolsMCPServer
   from praisonaiagents.mcp.mcp_security import SecurityConfig
   
   def search(query: str) -> str:
       """Search the web."""
       return f"Results for {query}"
   
   server = ToolsMCPServer(name="local-tools", tools=[search])
   
   security = SecurityConfig(bind_localhost_only=True)
   server.run_sse(host=security.get_bind_address(), port=8080, security=security)

2. Require a bearer token

   Set require_auth=True and provide the token via MCP_SSE_AUTH_TOKEN. Requests without a matching Authorization: Bearer … header get a 401.

   import os
   from praisonaiagents.mcp import ToolsMCPServer
   from praisonaiagents.mcp.mcp_security import SecurityConfig
   
   os.environ["MCP_SSE_AUTH_TOKEN"] = "local-dev-token"
   
   def search(query: str) -> str:
       """Search the web."""
       return f"Results for {query}"
   
   server = ToolsMCPServer(name="local-tools", tools=[search])
   security = SecurityConfig(require_auth=True, bind_localhost_only=True)
   
   server.run_sse(host=security.get_bind_address(), port=8080, security=security)

How It Works

run_sse wraps the Starlette app with security middleware when a SecurityConfig requires auth or origin validation.

Configuration Options

Extracted from SecurityConfig in praisonaiagents/mcp/mcp_security.py.

Token and origin overrides can also come from the environment:

Common Patterns

Choose a hardening level based on where the server runs.

Localhost-only, no token — trusted single-machine use:

from praisonaiagents.mcp import ToolsMCPServer
from praisonaiagents.mcp.mcp_security import SecurityConfig

def search(query: str) -> str:
    """Search the web."""
    return f"Results for {query}"

server = ToolsMCPServer(name="local-tools", tools=[search])
security = SecurityConfig(bind_localhost_only=True, require_auth=False)
server.run_sse(host=security.get_bind_address(), port=8080, security=security)

Token plus restricted origins — a shared or networked server:

import os
from praisonaiagents.mcp import ToolsMCPServer
from praisonaiagents.mcp.mcp_security import SecurityConfig

os.environ["MCP_SSE_AUTH_TOKEN"] = "shared-team-token"

def search(query: str) -> str:
    """Search the web."""
    return f"Results for {query}"

server = ToolsMCPServer(name="team-tools", tools=[search])
security = SecurityConfig(
    require_auth=True,
    validate_origin=True,
    allowed_origins=["localhost", "127.0.0.1", "app.internal"],
    bind_localhost_only=False,
)
server.run_sse(host=security.get_bind_address(), port=8080, security=security)

Best Practices

Related