v4.23.3

punkpeye/fastmcpv4.23.3Oct 20, 2026by github-actions[bot]

Upgrading?

AI Summary

This update resolves several critical bugs in the OpenAPI and Edge modules to enhance tool compatibility and security. It improves how resources are loaded, handles mixed-case HTTP URL schemes, and ensures security-sensitive fields are preserved during tool generation.

Key Highlights

  • Preserved declared mimeType for Edge resources when loading returns an object
  • Recognized mixed-case HTTP URL schemes in OpenAPI
  • Preserved __proto__ fields through generated tools to prevent security risks
  • Handled GET requests with object parameters correctly as tools

Full Release Notes

## [4.23.3](https://github.com/punkpeye/fastmcp/compare/v4.23.2...v4.23.3) (2026-10-20)


### Bug Fixes

* **edge:** keep a resource's declared mimeType when load returns an object ([#446](https://github.com/punkpeye/fastmcp/issues/446)) ([fe9f91a](https://github.com/punkpeye/fastmcp/commit/fe9f91a085c1c361f9295ab4d88e921f0a8519f7))
* **openapi:** ignore inherited mcpNames overrides ([#447](https://github.com/punkpeye/fastmcp/issues/447)) ([4b8d2a0](https://github.com/punkpeye/fastmcp/commit/4b8d2a0a4099fb5e92d4fa6cb9582eba06da778d))
* **openapi:** keep GETs with object parameters as tools ([#444](https://github.com/punkpeye/fastmcp/issues/444)) ([6f6f89a](https://github.com/punkpeye/fastmcp/commit/6f6f89ab25852812436156a6e41d3a3f9c382403))
* **openapi:** preserve __proto__ fields through generated tools ([#450](https://github.com/punkpeye/fastmcp/issues/450)) ([cf6f981](https://github.com/punkpeye/fastmcp/commit/cf6f981305e4f8c11c0a3e1d1401bcdcb1530587))
* **openapi:** recognize mixed-case HTTP URL schemes ([#449](https://github.com/punkpeye/fastmcp/issues/449)) ([ad208db](https://github.com/punkpeye/fastmcp/commit/ad208db72933e4431adecabf9e658235afd38135))



Related Repositories