Update app.py

app.py

@@ -51,6 +51,7 @@ def update_bottom(oauth_token: gr.OAuthToken | None):
         return gr.skip()
 
 gradio_app_code = """
+import os
 import gradio as gr
 
 gr.load_openapi(
@@ -58,7 +59,7 @@ gr.load_openapi(
     base_url=\"{}\",
     paths={},
     methods={},
-    auth_token={}
+    auth_token=os.getenv("OPENAPI_AUTH_TOKEN")
 ).launch(mcp_server=True)
 """
 
@@ -80,15 +81,17 @@ requirements_code = """
 https://gradio-pypi-previews.s3.amazonaws.com/86331cf36187d17a6d3ce26b01f28ea8dd5cbe35/gradio-5.38.2-py3-none-any.whl
 """
 
-def create_hf_space(token, space_name, app_code):
+def create_hf_space(token, space_name, space_public, app_code, auth_token):
     """
     Create a new Hugging Face Space with optional app.py file
     
     Args:
         token (str): Your Hugging Face API token
         space_name (str): The name of the space to create
+        space_public (bool): Whether the space should be public
         app_code (str): String content for the app.py file
-    
+        auth_token (str | None): The auth token to include in the API requests
+
     Returns:
         SpaceInfo: Information about the created space
     """
@@ -104,7 +107,7 @@ def create_hf_space(token, space_name, app_code):
         space_info = api.create_repo(
             repo_id=space_id,
             repo_type="space",
-            private=False,
+            private=not space_public,
             space_sdk="gradio"
         )
         api.upload_file(
@@ -128,6 +131,12 @@ def create_hf_space(token, space_name, app_code):
             repo_type="space",
             commit_message="Add requirements.txt"
         )
+        if auth_token:
+            api.add_space_secret(
+                repo_id=space_id,
+                key="OPENAPI_AUTH_TOKEN",
+                value=auth_token
+            )
 
         space_url = f"https://huggingface.co/spaces/{space_id}"
         gr.Success(f"🚀 Your space will be available at: <a href='{space_url}' target='_blank'>{space_url} ⤴</a>", duration=None)        
@@ -137,7 +146,7 @@ def create_hf_space(token, space_name, app_code):
         gr.Error(f"❌ Error creating space: {str(e)}")
 
 
-def launch_mcp_server(openapi_spec_url, api_base_url, paths, methods, auth_token, space_name_box, oauth_token: gr.OAuthToken | None):
+def launch_mcp_server(openapi_spec_url, api_base_url, paths, methods, auth_token, space_name_box, space_public_box, oauth_token: gr.OAuthToken | None):
     if oauth_token:
         if not paths:
             paths = None
@@ -150,13 +159,14 @@ def launch_mcp_server(openapi_spec_url, api_base_url, paths, methods, auth_token
         create_hf_space(
             oauth_token.token, 
             space_name_box,
+            space_public_box,
             gradio_app_code.format(
                 openapi_spec_url,
                 api_base_url,
                 paths,
                 methods,
-                auth_token
-            )
+            ),
+            auth_token
         )
     else:
         pass
@@ -173,12 +183,13 @@ with gr.Blocks(theme="ocean") as demo:
             methods = gr.CheckboxGroup(label="Methods", choices=["GET", "POST", "PUT", "DELETE"], value=["GET", "POST", "PUT", "DELETE"])
             with gr.Accordion("Optional Settings", open=False):
                 paths = gr.Textbox(label="Regex to filter paths by", placeholder=".*user.*", info="Only include API endpoints that match this regex")
-                auth_token = gr.Textbox(label="Auth token to include in API requests", info="This will be sent to the API endpoints as a Bearer token")
+                auth_token = gr.Textbox(label="Auth token to include in API requests", info="This will be sent to the API endpoints as a Bearer token", type="password")
             find_endpoints_button = gr.Button("🔍 Find Endpoints")
         with gr.Column():
             endpoints = gr.JSON(label="🔍 endpoints found", value=[], max_height=400)
             message = gr.Markdown("_Note:_ you must be signed in through your Hugging Face account to create the MCP Space")
             space_name_box = gr.Textbox(show_label=False, placeholder="Optional space name (e.g. my-mcp-space)")
+            space_public_box = gr.Checkbox(label="Make Space public", value=True)
             with gr.Row():
                 login_button = gr.LoginButton()
                 launch_button = gr.Button("🚀 Create MCP Space", variant="primary", interactive=False)
@@ -200,7 +211,7 @@ with gr.Blocks(theme="ocean") as demo:
         gr.on(
             [launch_button.click],
             launch_mcp_server,
-            inputs=[openapi_spec_url, api_base_url, paths, methods, auth_token, space_name_box],
+            inputs=[openapi_spec_url, api_base_url, paths, methods, auth_token, space_name_box, space_public_box],
             outputs=None
         )