dockerize-and-troubleshoot-n8n-connection

Author: R-Rudolf

Dockerfile

@@ -0,0 +1,17 @@
+# syntax=docker/dockerfile:1
+FROM python:3.11-slim
+
+# example call to run the container:
+# docker run --rm -it -p 8000:8000 spendee-mcp
+
+WORKDIR /app
+
+# Copy requirements and install
+COPY requirements.txt ./
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy source code
+COPY . .
+
+# Entrypoint for MCP server (mock get_wallets, ready for spendee_firestore)
+CMD ["python", "/app/spendee/spendee_mcp.py"]

build.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+set -euo pipefail
+
+IMAGE_NAME="spendee-mcp"
+REGISTRY="127.0.0.1:5555"
+TAG="latest"
+
+NO_PUSH=0
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        -t)
+            TAG="$2"
+            shift 2
+            ;;
+        --no-push)
+            NO_PUSH=1
+            shift
+            ;;
+        *)
+            echo "Usage: $0 [-t tag] [--no-push]"
+            exit 1
+            ;;
+    esac
+done
+
+REGISTRY_TAG="$REGISTRY/$IMAGE_NAME:$TAG"
+
+cd "$(dirname "$0")"
+
+echo "Building Docker image..."
+docker build -t "$IMAGE_NAME:$TAG" -t "$REGISTRY_TAG" .
+
+if [[ "$NO_PUSH" -eq 0 ]]; then
+    echo "Pushing Docker image to local registry..."
+    docker push "$REGISTRY_TAG"
+else
+    echo "Skipping push to local registry (--no-push specified)."
+fi
+
+echo "Done."

inspect.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+set -euo pipefail
+cd "$(dirname "$0")"
+source .venv/bin/activate
+DANGEROUSLY_OMIT_AUTH=true mcp dev spendee/spendee_mcp.py

spendee/spendee_mcp.py

@@ -8,20 +8,23 @@
 from mcp.server.streamable_http_manager import StreamableHTTPSessionManager
 
 # to start (after .venv setup):
-# python spendee/spendee_mcp.py
+#   python spendee/spendee_mcp.py
 
 # to test:
-# DANGEROUSLY_OMIT_AUTH=true mcp dev spendee/spendee_mcp.py
+#   mcp dev spendee/spendee_mcp.py
 # Then on the url: http://localhost:6274/
 # setup "Transport Type" to "Streamable HTTP"
 # and "Server URL" to "http://localhost:8000/mcp"
 
 ACCEPTED_TOKEN = os.environ.get("MCP_TOKEN", "spendee-token")
+PORT = int(os.environ.get("MCP_PORT", 8000))
+DEBUG_MODE = os.environ.get("DEBUG_MODE", "") != ""
+DISABLE_AUTH = os.environ.get("DISABLE_AUTH", "") != ""
 
 logging.basicConfig(level=logging.DEBUG)
 logger = logging.getLogger(__name__)
 
-mcp = FastMCP("spendee")
+mcp = FastMCP("spendee", host="0.0.0.0", port=PORT)
 
 @mcp.tool()
 def get_wallets():
@@ -31,41 +34,65 @@ def get_wallets():
         {"id": 2, "name": "Savings", "currency": "EUR", "balance": 7890.12},
     ]
 
-# --- Extra authentication layer ---
-session_manager = StreamableHTTPSessionManager(
-    app=mcp._mcp_server,  # Use the underlying MCPServer instance
-)
 
-async def auth_middleware(scope, receive, send):
-    request = Request(scope, receive)
-    auth_header = request.headers.get("authorization")
+# def server_with_authentication():
+#     session_manager = StreamableHTTPSessionManager(
+#         app=mcp._mcp_server,  # Use the underlying MCPServer instance
+#     )
 
-    if not auth_header or not auth_header.lower().startswith("bearer "):
-        logger.warning("Missing or invalid Authorization header.")
-        raise HTTPException(401, "Missing or invalid Authorization header.")
+#     async def auth_middleware(scope, receive, send):
+#         request = Request(scope, receive)
+#         # Log request method, url, and headers for troubleshooting
+#         if DEBUG_MODE:
+#             logger.debug(f"Incoming request: method={request.method}, url={request.url}")
+#             logger.debug(f"Request headers: {dict(request.headers)}")
 
-    token = auth_header.split(" ", 1)[1]
-    if token != ACCEPTED_TOKEN:
-        logger.warning("Invalid or expired token.")
-        raise HTTPException(401, "Invalid or expired token.")
+#         auth_header = request.headers.get("authorization")
 
-    await session_manager.handle_request(scope, receive, send)
+#         if not auth_header or not auth_header.lower().startswith("bearer "):
+#             logger.warning("Missing or invalid Authorization header.")
+#             raise HTTPException(401, "Missing or invalid Authorization header.")
 
-@contextlib.asynccontextmanager
-async def lifespan(app: FastAPI):
-    async with session_manager.run():
-        logger.info("StreamableHTTPSessionManager started.")
-        yield
-        logger.info("StreamableHTTPSessionManager stopped.")
+#         token = auth_header.split(" ", 1)[1]
+#         if token != ACCEPTED_TOKEN:
+#             logger.warning("Invalid or expired token.")
+#             raise HTTPException(401, "Invalid or expired token.")
 
-app = FastAPI(lifespan=lifespan)
-app.mount("/mcp", auth_middleware)
+#         await session_manager.handle_request(scope, receive, send)
+
+#     @contextlib.asynccontextmanager
+#     async def lifespan(app: FastAPI):
+#         async with session_manager.run():
+#             logger.info("StreamableHTTPSessionManager started.")
+#             yield
+#             logger.info("StreamableHTTPSessionManager stopped.")
+
+#     app = FastAPI(lifespan=lifespan)
+#     app.mount("/mcp", auth_middleware)
+
+#     logger.info(f"Starting Spendee MCP Server with Bearer Token Authentication on port {PORT}")
+#     logger.info(f"Access the MCP endpoint at http://0.0.0.0:{PORT}/mcp")
+#     uvicorn.run(app, host="0.0.0.0", port=PORT)
+
+def server_with_sse():
+    app = FastAPI()
+    @app.get("/")
+    def read_root():
+        return {"Hello": "World"}
+    #from app.sse import create_sse_server
+    app.mount("/", app.sse.create_sse_server(mcp))
 
-# --- Server Execution ---
 if __name__ == "__main__":
-    logger.info("Starting Spendee MCP Server with Bearer Token Authentication")
-    logger.info("Access the MCP endpoint at http://0.0.0.0:8000/mcp")
-    uvicorn.run(app, host="0.0.0.0", port=8000)
+    logger.info("Starting Spendee MCP Server as SSE without authentication")
+    mcp.run(transport="sse") # for n8n compatibility, authentication implemented on cloudflare level
+    #server_with_sse()
+
+    # if DISABLE_AUTH:
+    #     logger.warning("Running without authentication! This is insecure and should only be used for local testing.")
+    #     #mcp.run(transport="streamable-http")
+    #     mcp.run(transport="sse")
+    # else:
+    #     server_with_authentication()
 
 
 # relevant URLs for learning:
@@ -76,3 +103,4 @@ async def lifespan(app: FastAPI):
 # - https://modelcontextprotocol.io/docs/tools/debugging
 # - https://modelcontextprotocol.io/specification/2025-03-26/basic/transports#session-management
 # - https://github.com/modelcontextprotocol/python-sdk?tab=readme-ov-file#authentication
+# - auth inspiration: https://github.com/zahere-dev/mcp-labs/tree/main