Skip to content

feat(DATAGO-122537): add SSL/TLS configuration support for MCP connections#857

Open
gregmeldrum wants to merge 1 commit intomainfrom
greg/mcp_ssl_config
Open

feat(DATAGO-122537): add SSL/TLS configuration support for MCP connections#857
gregmeldrum wants to merge 1 commit intomainfrom
greg/mcp_ssl_config

Conversation

@gregmeldrum
Copy link
Collaborator

Summary

  • Add SSL/TLS configuration support for remote MCP connections (SSE and Streamable HTTP)
  • Allow connecting to MCP servers with self-signed certificates or custom CA bundles
  • New ssl_config option in connection_params with verify and ca_bundle settings

Configuration Example

tools:
  - tool_type: mcp
    connection_params:
      type: sse
      url: "https://mcp.example.com/sse"
      ssl_config:
        verify: false  # Disable SSL verification (dev only)
        # OR
        ca_bundle: "/path/to/ca-cert.pem"  # Custom CA certificate

Test plan

  • Unit tests for SslConfig dataclass validation
  • Unit tests for create_ssl_httpx_client_factory function
  • All 653 agent unit tests pass
  • Manual testing with self-signed certificate MCP server

🤖 Generated with Claude Code

Add support for configuring SSL/TLS settings for remote MCP connections
(SSE and Streamable HTTP) to allow connecting to MCP servers with
self-signed certificates or custom CA bundles.

New configuration options in connection_params:
- ssl_config.verify: disable SSL verification (dev only)
- ssl_config.ca_bundle: path to custom CA certificate

Co-Authored-By: Claude <[email protected]>
@sonarqube-solacecloud
Copy link

Quality Gate failed Quality Gate failed

Failed conditions
62.5% Coverage on New Code (required ≥ 70%)

See analysis details on SonarQube

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant