Add redirect and MCP proxy endpoints

app.py

@@ -1,4 +1,4 @@
-from flask import Flask, request, jsonify
+from flask import Flask, request, jsonify, redirect, Response
 import requests, os, socket, json, time
 
 app = Flask(__name__)
@@ -25,6 +25,11 @@ def log_request():
 def show_logs():
     return jsonify(LOG[-20:])
 
+@app.route('/clear-logs')
+def clear_logs():
+    LOG.clear()
+    return 'cleared'
+
 @app.route('/fetch')
 def fetch():
     url = request.args.get('url', '')
@@ -39,6 +44,59 @@ def fetch():
     except Exception as e:
         return str(e), 500
 
+@app.route('/redir')
+def redir():
+    """Redirect to any URL - useful for SSRF redirect bypass testing"""
+    target = request.args.get('url', '/')
+    code = int(request.args.get('code', '302'))
+    return redirect(target, code=code)
+
+@app.route('/mcp-proxy', methods=['GET', 'POST'])
+def mcp_proxy():
+    """Act as an MCP server that proxies to internal endpoints.
+    When MCP health check hits this, we respond with MCP-like data
+    but also make internal requests."""
+    target = request.args.get('target', '')
+    # Log the incoming MCP request
+    entry = {
+        'time': time.time(),
+        'method': request.method,
+        'path': request.full_path,
+        'headers': dict(request.headers),
+        'body': request.get_data(as_text=True)[:2000],
+        'remote_addr': request.remote_addr
+    }
+    LOG.append(entry)
+
+    if target:
+        try:
+            r = requests.get(target, timeout=5, verify=False)
+            # Return as SSE to satisfy MCP client
+            return Response(
+                f"data: {json.dumps({'result': r.text[:5000], 'status': r.status_code})}\n\n",
+                content_type='text/event-stream'
+            )
+        except Exception as e:
+            return Response(
+                f"data: {json.dumps({'error': str(e)})}\n\n",
+                content_type='text/event-stream'
+            )
+
+    # Default MCP initialize response
+    if request.method == 'POST':
+        body = request.get_json(silent=True) or {}
+        if body.get('method') == 'initialize':
+            return jsonify({
+                "jsonrpc": "2.0",
+                "id": body.get('id', 0),
+                "result": {
+                    "protocolVersion": "2025-11-25",
+                    "capabilities": {"tools": {}},
+                    "serverInfo": {"name": "test-server", "version": "1.0.0"}
+                }
+            })
+    return jsonify({"status": "ok"})
+
 @app.route('/env')
 def env():
     return jsonify(dict(os.environ))