mirror of
https://github.com/safishamsi/graphify.git
synced 2026-07-11 18:07:31 +00:00
Safi
2a683aac2e
python -m graphify.serve graph.json --transport http --port 8080 serves the same MCP tools over the Streamable HTTP transport (spec 2025-03-26) so a single shared process can serve the graph for a whole team. - _build_server() refactors server registration into a shared factory (stdio behavior is byte-for-byte unchanged — all 52 existing tests pass) - _ApiKeyMiddleware: raw ASGI (not BaseHTTPMiddleware) preserves SSE streaming; constant-time compare; RFC-6750 case-insensitive Bearer; blank-key normalized to no-auth - DNS-rebinding protection via TransportSecuritySettings; wildcard binds disable it and print an exposure warning when no api-key is set - session_idle_timeout reaps idle stateful sessions (default 3600s) so a long-running shared server does not leak memory on client disconnect - Dockerfile + .dockerignore for containerized team deployment - 16 new tests via in-process ASGI test client (importorskip-guarded) - stdio remains the default; no change for existing setups Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
26 lines
881 B
Docker
26 lines
881 B
Docker
# graphify MCP server as a shared HTTP service (issue #1143).
|
|
#
|
|
# Build: docker build -t graphify .
|
|
# Run: docker run -p 8080:8080 -v "$(pwd)/graphify-out:/data" graphify \
|
|
# /data/graph.json --transport http --host 0.0.0.0 --api-key "$SECRET"
|
|
#
|
|
# Builds from source so the image includes the Streamable HTTP transport even
|
|
# before it lands on PyPI. The graph.json is mounted at runtime (-v), never
|
|
# baked into the image.
|
|
FROM python:3.12-slim
|
|
|
|
WORKDIR /app
|
|
COPY . /app
|
|
|
|
# The [mcp] extra pulls mcp + starlette + uvicorn, which the HTTP transport needs.
|
|
RUN pip install --no-cache-dir ".[mcp]"
|
|
|
|
# Run as a non-root user — the server is network-exposed.
|
|
RUN useradd --create-home --uid 10001 graphify
|
|
USER graphify
|
|
|
|
EXPOSE 8080
|
|
|
|
ENTRYPOINT ["python", "-m", "graphify.serve"]
|
|
CMD ["/data/graph.json", "--transport", "http", "--host", "0.0.0.0", "--port", "8080"]
|