Skip to content

Fix Python version constraint and MCP SDK dependency#14

Open
kovalevsky wants to merge 1 commit intocanvrno:mainfrom
kovalevsky:fix/python-version-and-mcp-dependency
Open

Fix Python version constraint and MCP SDK dependency#14
kovalevsky wants to merge 1 commit intocanvrno:mainfrom
kovalevsky:fix/python-version-and-mcp-dependency

Conversation

@kovalevsky
Copy link

@kovalevsky kovalevsky commented Feb 2, 2026

  • Bump requires-python from >=3.9 to >=3.10 — the mcp SDK requires Python 3.10+, making the previous constraint unsatisfiable
  • Replace unstable mcp @ git+... dependency with stable mcp>=1.0.0,<1.7.0 — the git HEAD removed mcp.server.fastmcp module, breaking the server import
  • Add main() entry point function to server.py to match the [project.scripts] config in pyproject.toml

- Bump requires-python from >=3.9 to >=3.10 (mcp SDK requires 3.10+)
- Replace mcp git dependency with stable release mcp>=1.0.0,<1.7.0
  (git HEAD removed mcp.server.fastmcp, breaking the import)
- Add main() entry point function to match pyproject.toml scripts config
markmcjr pushed a commit to markmcjr/ProxmoxMCP that referenced this pull request Feb 15, 2026
- Remove execute_vm_command MCP tool registration (arbitrary code execution risk)
- Add environment variable auth (PROXMOX_HOST, PROXMOX_TOKEN_ID, PROXMOX_TOKEN_SECRET)
- Add input validation for node names and VM IDs
- Enable SSL verification by default in config.example.json
- Fix Python version requirement to >=3.10 (MCP SDK needs it)
- Fix MCP dependency: replace broken git+ URL with mcp>=1.0.0,<1.7.0
- Add main() entry point and __main__.py for python -m invocation
- Wrap per-node VM listing in try/except (offline nodes no longer crash)
- Fix test imports and assertions to match hardened codebase
- Add SETUP.md with complete configuration and continuation docs

Based on community PRs canvrno#14 and canvrno#15 plus additional security hardening.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant