Pass API keys as HTTP headers — the proxy maps them to environment variables and manages a pool of child processes. Different keys get isolated processes. No race conditions. No restarts.
/mcp-streamable-http-server ├── middlewares/ # 自定义中间件 │ ├── authorize.py # - 认证中间件 │ ├── demo.py # - 示例中间件 ...
There’s a funny saying making the rounds right now: “The S in MCP stands for security.” Of course, there is no S in MCP and that’s kind of the point. Security in the Model Context Protocol ecosystem ...