Final production deployment

Dockerfile

@@ -1,11 +1,6 @@
 # Use an official Python runtime as a parent image
 FROM python:3.12-slim
 
-# Set environment variables
-ENV PYTHONUNBUFFERED=1 \
-    PYTHONDONTWRITEBYTECODE=1 \
-    PATH="/home/user/.local/bin:$PATH"
-
 # Install system dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
@@ -14,18 +9,29 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 # Create a non-root user
 RUN useradd -m -u 1000 user
-USER user
+
+# Set up working directory
 WORKDIR /home/user/app
 
+# Change ownership of the app directory
+RUN chown user:user /home/user/app
+
+# Switch to non-root user
+USER user
+
+# Set environment variables
+ENV PATH="/home/user/.local/bin:/home/user/app/.venv/bin:$PATH" \
+    PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1
+
 # Install uv
 RUN curl -LsSf https://astral.sh/uv/install.sh | sh
 
 # Copy the application code
 COPY --chown=user . .
 
-# Install dependencies using uv
-# We use --system because we want to install into the container's python environment
-RUN uv pip install --system .
+# Remove existing venv if any and install dependencies
+RUN rm -rf .venv && uv venv && uv pip install .
 
 # Expose the port Hugging Face expects
 EXPOSE 7860

app/main.py

@@ -68,19 +68,17 @@ async def verify_token(request: Request):
     if token != TOKEN:
         raise HTTPException(status_code=401, detail="Unauthorized")
 
-# Create the FastMCP Starlette app
+# FastMCP Starlette app
 mcp_app = mcp.sse_app()
 
-# Mount the MCP app with token verification for /sse
-# Note: /messages is usually called by the client as a POST
-# We can wrap the whole mcp_app if we want, or just the /sse route.
-# For simplicity and according to requirements "enable the mcp server to be connected to via /sse endpoint ... and integrate a token"
-
 @app.get("/sse")
 async def sse(request: Request, _ = Depends(verify_token)):
     # Find the sse route in mcp_app
     for route in mcp_app.routes:
         if route.path == "/sse":
+            # Override host header for FastMCP transport security
+            request.scope["headers"] = [(k, v) for k, v in request.scope["headers"] if k.lower() != b"host"]
+            request.scope["headers"].append((b"host", b"localhost:7860"))
             return await route.endpoint(request)
     raise HTTPException(status_code=404)
 
@@ -89,7 +87,9 @@ async def messages(request: Request):
     # Find the messages route/mount in mcp_app
     for route in mcp_app.routes:
         if route.path == "/messages":
-            # This is likely a Mount
+            # Override host header
+            request.scope["headers"] = [(k, v) for k, v in request.scope["headers"] if k.lower() != b"host"]
+            request.scope["headers"].append((b"host", b"localhost:7860"))
             return await route.app(request.scope, request.receive, request._send)
     raise HTTPException(status_code=404)
 

pyproject.toml

@@ -1,13 +1,13 @@
 [project]
 name = "clickup-mcp"
 version = "0.1.0"
-description = "Add your description here"
+description = "ClickUp MCP Server"
 readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
-    "fastapi>=0.136.1",
-    "httpx>=0.28.1",
-    "huggingface-hub>=1.13.0",
-    "mcp[cli]>=1.27.0",
-    "uvicorn>=0.46.0",
+    "fastapi",
+    "httpx",
+    "mcp[cli]",
+    "uvicorn",
+    "sse-starlette",
 ]