Allow enabling the streamable-HTTP standalone SSE stream from YAML for remote MCP toolsets
Los mantenedores suelen responder en 1 día
Evaluación
- Dificultad
- 3/5
- Tiempo estimado
- 1-2 días
- Aptitud para principiantes
- 72/100
Línea de trabajo
Read pkg/config/latest/types.go and the remote toolset construction path in pkg/tools/mcp/mcp.go; then find the matching Remote definition in agent-schema.json and the docs for remote: options. Trace how Toolset.SetStandaloneSSE() is used before Start. Done means YAML can opt in with standalone_sse, the default remains false, and the schema and documentation describe the option.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
Overview
Add an optional boolean on remote: MCP toolsets, for example:
toolsets:
- type: mcp
remote:
url: http://<gateway-host>/mcp
transport_type: streamable-http
standalone_sse: true # new, default false
When true, the streamable-HTTP transport opens the standalone SSE GET stream: the optional GET on the same MCP endpoint that the streamable-HTTP spec defines for server-to-client messages (DisableStandaloneSSE: false in the go-sdk transport). This is unrelated to the legacy transport_type: sse transport, which uses a separate endpoint and protocol.
The plumbing already exists: Toolset.SetStandaloneSSE() (added in #3770) and remoteMCPClient.standaloneSSE in pkg/tools/mcp. As of v1.152.0 and current main, nothing in the YAML loading path calls it, and config/latest.Remote has no corresponding field, so a YAML-defined agent cannot enable it.
Motivation
This is needed for docker-agent to work reliably with Docker's sbx MCP gateway (the MCP gateway exposed inside an sbx sandbox, e.g. via sbx mcp). Both are Docker products and should work together out of the box; today they only partly do.
The comment on standaloneSSE in pkg/tools/mcp/remote.go already describes the situation: some MCP gateways send keepalive pings and "close the session when the ping cannot be delivered". With the standalone stream disabled (the default), that is what we observe with the sbx gateway:
-
docker-agent connects and lists tools. Without the standalone GET stream there is no channel for server-initiated messages.
-
The session is invalidated well under a minute after connect. docker-agent doesn't notice, because nothing is listening on a stream.
-
The next call fails and the supervisor reconnects:
level=WARN msg="Authenticated MCP request was rejected by the server" url=http://<gateway-host>/mcp status=404 body="session not found\n" level=WARN msg="MCP call failed, forcing reconnect and retrying" ... error="... session not found" level=WARN msg="supervisor: session lost" ... forced=true -
notifications/tools/list_changedis never received, so the toolset cache is never refreshed: across four rotated debug logs (about three days of use) there are zeroMCP server notified tool list changedlines, even though the gateway changed its tool set several times.
The most visible consequence is OAuth-backed servers behind the gateway. When a server needs (re)authorization, the gateway exposes only an authorize tool in its place. The user completes the browser flow and the gateway connects the real backend and changes its tool set. docker-agent, however:
- re-listed tools before the user finished authorizing (during the reconnect described above), so it cached the pre-auth list;
- never receives
tools/list_changedafterwards; - has nothing that fails, so nothing triggers another reconnect or re-list.
The agents keep seeing only the stale list (in our case an agent resolved 1 tool, 27 s after authorization completed) until docker-agent is restarted. A fresh start lists the real tools immediately. The user did everything right and the tools still don't appear.
Use cases
- Agents running inside an sbx sandbox that reach MCP servers through the sbx MCP gateway over
streamable-http, where servers can be authorized, re-authorized, or loaded and unloaded while a session is running. - Any remote streamable-HTTP MCP gateway that uses keepalive pings or sends
tools/list_changedon the standalone stream. - Multi-agent configs where each agent declares its own remote toolset. Each toolset holds its own session and its own tool cache, so every one of them goes stale independently.
Proposed solution
- Add
StandaloneSSE bool(json:"standalone_sse,omitempty") toRemoteinpkg/config/latest/types.go, and the matching property inagent-schema.json. - In the remote-toolset construction path (
pkg/tools/mcp/mcp.go, wheretoolset.Remote.URLis handled), callSetStandaloneSSE(toolset.Remote.StandaloneSSE)beforeStart. - Keep the default
false, as in #3770, because of the hang reported for some servers (commit 332f5928, go-sdk #633). It is opt-in, so there is no behaviour change for existing configs. - Document it next to the other
remote:options.
Alternatives
/toolset-restart. It does re-list tools, butLocalRuntime.RestartToolset(pkg/runtime/runtime.go) only looks at the active agent's toolsets. When the stale toolset belongs to a sub-agent, there is nothing to restart from the TUI. The same toolset also can't be told apart from its siblings in a multi-agent config, because unnamed remote toolsets all share the descriptionmcp(remote host=<host> transport=streamable-http).transport_type: sse. This is the legacy transport on a separate endpoint, not the standalone stream of streamable HTTP, and it requires server support that a streamable-HTTP-only gateway doesn't have.lifecycle:tuning (restart: always,max_restarts, backoff). It only governs reconnecting after a lost session is detected, and without a stream the loss is only detected when a call fails, so it doesn't help.- Restart docker-agent after every in-session re-authorization. This works but defeats the point of in-session authorization.
- Enable it by default for
streamable-http. This risks the hang cases in #3770, so an opt-in is safer. - A gateway-side change (not to ping sessions that have no open stream) could also help, but it is complementary and out of scope here. Exposing the existing opt-in in YAML is the minimal, self-contained fix on the docker-agent side.
Related issues
- #3770 introduced
SetStandaloneSSEas a library-only option with default false.
Additional context
Observed with docker-agent v1.152.0 and sbx 0.49.2. The evidence is from docker-agent's debug log only; sanitised excerpts are available on request.
We have not yet verified end to end that enabling the standalone stream keeps the gateway session alive and delivers tools/list_changed; that is the expected outcome based on the code and the comment in remote.go.
- Lenguaje dominante
- Go
- Estrellas
- 4.6k
- Forks
- 529
- Merge medio
- 14 h 28 min
- PR fusionados (30 d)
- 183
Preparar el entorno
Inicia el contenedor de desarrollo del proyecto en tu navegador, con tu propia cuenta de GitHub.
- Incluye un Dockerfile o un archivo de Docker Compose
- Sin plantilla de pull request
- Sin guía de contribución
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de docker/docker-agent
-
area/config area/models
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100
docker/docker-agent#4714 ·
Los mantenedores suelen responder en 1 día
-
Error when trying to run sandbox example?Posiblemente ocupada @dgageot la tomó hace 8 días. Abiertoarea/cli
Dificultad 2/5 1-3 horas Aptitud para principiantes 62/100
docker/docker-agent#4672 · 1 comentario · 1 reacción · 1 asignado ·
Los mantenedores suelen responder en 1 día
-
pkg/hooks tests fail with a misleading assertion when jq is not installedPosiblemente ocupada @dwin-gharibi la tomó hace 66 días. Abiertoarea/testing
Dificultad 2/5 1-3 horas Aptitud para principiantes 86/100
docker/docker-agent#4052 ·
Los mantenedores suelen responder en 1 día
-
`remove_directory` and `create_directory` hide work they already did when a later path failsPosiblemente ocupada @dwin-gharibi la tomó hace 84 días. Abiertoarea/tools
Dificultad 2/5 1-3 horas Aptitud para principiantes 85/100
docker/docker-agent#3933 ·
Los mantenedores suelen responder en 1 día
-
`edit_file` silently edits the first match when `oldText` occurs more than oncePosiblemente ocupada @dwin-gharibi la tomó hace 84 días. Abiertoarea/tools
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
docker/docker-agent#3929 · 2 comentarios ·
Los mantenedores suelen responder en 1 día
Todos los issues de docker/docker-agent
Issues similares
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
google/go-containerregistry#2491 ·
Los mantenedores suelen responder en 1 día
-
aiac enhancement
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
Los mantenedores suelen responder en 1 día
-
phase:v1 type:harness
Dificultad 2/5 1-3 horas Aptitud para principiantes 70/100
scttfrdmn/burroughs#1181 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100
compiler-explorer/ce-ci#28 ·
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 74/100
Los mantenedores suelen responder en 1 día