Uploaded image for project: 'Insights Experiences'
  1. Insights Experiences
  2. HMS-9842

Authentication headers over Streamable HTTP are not being sent to API/tools

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • Image Builder
    • None

      Insights MCP server seems to ignore the insights-client-id and insights-client-secret headers configured in a MCP client when integrated via http. The tools only succeed when I run the container with the INSIGHTS_CLIENT_ID and INSIGHTS_CLIENT_SECRET env vars.
      https://github.com/RedHatInsights/insights-mcp/tree/main?tab=readme-ov-file#option-2-manual-streamable-http-installation-advanced

       

      How to reproduce:

      mcpServers.json:

      {
        "mcpServers": {
          "insights-mcp-prod-http": {
            "type": "streamable-http",
            "url": "http://localhost:8000/mcp",
            "headers": {
              "insights-client-id": "<client-id>", 
              "insights-client-secret": "<client-secret>" 
            }
          }
        }
      }
      

      Run insights-mcp serve with:

      # With Insights MCP installed as CLI tool
      insights-mcp --readonly http
      
      # However the following will work
      INSIGHTS_CLIENT_ID=<client-id> INSIGHTS_CLIENT_SECRET=<client-secret>  insights-mcp --readonly http

              rh-ee-fschulle Florian Schüller
              rh-ee-ssantama Sergio Santamaria Riocerezo
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: