mirror of
https://github.com/open-webui/mcpo.git
synced 2026-07-23 12:15:22 -04:00
feat: Support authentication for SSE (Server-Sent Events) or streamable interfaces by configuring HTTP headers. #59
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @LYH-RAIN on GitHub (May 12, 2025).
Check Existing Issues
Problem Description
Please support authentication for SSE (Server-Sent Events) or streamable interfaces by configuring HTTP headers. My config.json currently looks like this:


However, when starting the Docker container, the following error occurs:
Desired Solution you'd like
Provide a method to configure headers in config.json for authentication purposes."
Alternatives Considered
No response
Additional Context
No response
@riekusr commented on GitHub (May 18, 2025):
I really need this as well.... Any work arounds?
@LukeScrewdriver commented on GitHub (May 18, 2025):
Hi, try this #72
https://github.com/open-webui/mcpo/issues/72#issuecomment-2832328428
@nkeilar commented on GitHub (May 23, 2025):
In my case I'm trying to pass an API key in the Bearer header, and I want it to be passed to the mcp server. Maybe I'm doing it the wrong way but I want to setup one SSE server, and then have clients (staff) pass in a token
url:userid:apikeyusing this string the SSE server knows which server and credentials to query. Then I can run one SSE MCP server exposed to openwebui as a user added tool.Seems currently no way to do that
@iKun4real commented on GitHub (May 29, 2025):
Yea, I kindda need this too because I have already deployed some (stdio to streamable http) MCP servers for Cherry Studio. If request headers can be added, I won't need to deploy these MCP servers on MCPO again, thereby consuming double the resources.
@vk2r commented on GitHub (Jun 1, 2025):
Same problem here.
@fpytloun commented on GitHub (Jun 10, 2025):
Same issue here 🙁
It seems to be a bug, not feature request. Checked mcpo code briefly and it seems to pass headers just fine (https://github.com/open-webui/mcpo/blob/main/src/mcpo/main.py#L325). Added in v0.0.15 (https://github.com/open-webui/mcpo/commit/dc4c4abe0831685a253516cd87ca84365f838a6e).
Ok.. I am using 0.0.14, let's update..
@fpytloun commented on GitHub (Jun 10, 2025):
Ok, version 0.0.15 works. This can be closed 👍
@MBueschelberger commented on GitHub (Jun 22, 2025):
@nkeilar
Is it maybe related to this issue?
https://github.com/open-webui/mcpo/issues/182