Allow enabling the streamable-HTTP standalone SSE stream from YAML for remote MCP toolsets
I maintainer di solito rispondono entro 1 giorno
Valutazione
- Difficoltà
- 3/5
- Tempo stimato
- 1-2 giorni
- Idoneità per principianti
- 72/100
Direzione di ricerca
Read pkg/config/latest/types.go and the remote toolset construction path in pkg/tools/mcp/mcp.go; then find the matching Remote definition in agent-schema.json and the docs for remote: options. Trace how Toolset.SetStandaloneSSE() is used before Start. Done means YAML can opt in with standalone_sse, the default remains false, and the schema and documentation describe the option.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
Overview
Add an optional boolean on remote: MCP toolsets, for example:
toolsets:
- type: mcp
remote:
url: http://<gateway-host>/mcp
transport_type: streamable-http
standalone_sse: true # new, default false
When true, the streamable-HTTP transport opens the standalone SSE GET stream: the optional GET on the same MCP endpoint that the streamable-HTTP spec defines for server-to-client messages (DisableStandaloneSSE: false in the go-sdk transport). This is unrelated to the legacy transport_type: sse transport, which uses a separate endpoint and protocol.
The plumbing already exists: Toolset.SetStandaloneSSE() (added in #3770) and remoteMCPClient.standaloneSSE in pkg/tools/mcp. As of v1.152.0 and current main, nothing in the YAML loading path calls it, and config/latest.Remote has no corresponding field, so a YAML-defined agent cannot enable it.
Motivation
This is needed for docker-agent to work reliably with Docker's sbx MCP gateway (the MCP gateway exposed inside an sbx sandbox, e.g. via sbx mcp). Both are Docker products and should work together out of the box; today they only partly do.
The comment on standaloneSSE in pkg/tools/mcp/remote.go already describes the situation: some MCP gateways send keepalive pings and "close the session when the ping cannot be delivered". With the standalone stream disabled (the default), that is what we observe with the sbx gateway:
-
docker-agent connects and lists tools. Without the standalone GET stream there is no channel for server-initiated messages.
-
The session is invalidated well under a minute after connect. docker-agent doesn't notice, because nothing is listening on a stream.
-
The next call fails and the supervisor reconnects:
level=WARN msg="Authenticated MCP request was rejected by the server" url=http://<gateway-host>/mcp status=404 body="session not found\n" level=WARN msg="MCP call failed, forcing reconnect and retrying" ... error="... session not found" level=WARN msg="supervisor: session lost" ... forced=true -
notifications/tools/list_changedis never received, so the toolset cache is never refreshed: across four rotated debug logs (about three days of use) there are zeroMCP server notified tool list changedlines, even though the gateway changed its tool set several times.
The most visible consequence is OAuth-backed servers behind the gateway. When a server needs (re)authorization, the gateway exposes only an authorize tool in its place. The user completes the browser flow and the gateway connects the real backend and changes its tool set. docker-agent, however:
- re-listed tools before the user finished authorizing (during the reconnect described above), so it cached the pre-auth list;
- never receives
tools/list_changedafterwards; - has nothing that fails, so nothing triggers another reconnect or re-list.
The agents keep seeing only the stale list (in our case an agent resolved 1 tool, 27 s after authorization completed) until docker-agent is restarted. A fresh start lists the real tools immediately. The user did everything right and the tools still don't appear.
Use cases
- Agents running inside an sbx sandbox that reach MCP servers through the sbx MCP gateway over
streamable-http, where servers can be authorized, re-authorized, or loaded and unloaded while a session is running. - Any remote streamable-HTTP MCP gateway that uses keepalive pings or sends
tools/list_changedon the standalone stream. - Multi-agent configs where each agent declares its own remote toolset. Each toolset holds its own session and its own tool cache, so every one of them goes stale independently.
Proposed solution
- Add
StandaloneSSE bool(json:"standalone_sse,omitempty") toRemoteinpkg/config/latest/types.go, and the matching property inagent-schema.json. - In the remote-toolset construction path (
pkg/tools/mcp/mcp.go, wheretoolset.Remote.URLis handled), callSetStandaloneSSE(toolset.Remote.StandaloneSSE)beforeStart. - Keep the default
false, as in #3770, because of the hang reported for some servers (commit 332f5928, go-sdk #633). It is opt-in, so there is no behaviour change for existing configs. - Document it next to the other
remote:options.
Alternatives
/toolset-restart. It does re-list tools, butLocalRuntime.RestartToolset(pkg/runtime/runtime.go) only looks at the active agent's toolsets. When the stale toolset belongs to a sub-agent, there is nothing to restart from the TUI. The same toolset also can't be told apart from its siblings in a multi-agent config, because unnamed remote toolsets all share the descriptionmcp(remote host=<host> transport=streamable-http).transport_type: sse. This is the legacy transport on a separate endpoint, not the standalone stream of streamable HTTP, and it requires server support that a streamable-HTTP-only gateway doesn't have.lifecycle:tuning (restart: always,max_restarts, backoff). It only governs reconnecting after a lost session is detected, and without a stream the loss is only detected when a call fails, so it doesn't help.- Restart docker-agent after every in-session re-authorization. This works but defeats the point of in-session authorization.
- Enable it by default for
streamable-http. This risks the hang cases in #3770, so an opt-in is safer. - A gateway-side change (not to ping sessions that have no open stream) could also help, but it is complementary and out of scope here. Exposing the existing opt-in in YAML is the minimal, self-contained fix on the docker-agent side.
Related issues
- #3770 introduced
SetStandaloneSSEas a library-only option with default false.
Additional context
Observed with docker-agent v1.152.0 and sbx 0.49.2. The evidence is from docker-agent's debug log only; sanitised excerpts are available on request.
We have not yet verified end to end that enabling the standalone stream keeps the gateway session alive and delivers tools/list_changed; that is the expected outcome based on the code and the comment in remote.go.
- Lingua principale
- Go
- Stelle
- 4.6k
- Fork
- 529
- Merge medio
- 14h 28m
- PR unite (30g)
- 183
Preparare l'ambiente
Avvia il container di sviluppo del progetto nel browser, con il tuo account GitHub.
- Include un Dockerfile o un file Docker Compose
- Nessun modello di pull request
- Nessuna guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di docker/docker-agent
-
area/config area/models
Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100
docker/docker-agent#4714 ·
I maintainer di solito rispondono entro 1 giorno
-
Error when trying to run sandbox example?Forse già presa @dgageot l’ha presa 8 giorni fa. Apertaarea/cli
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
docker/docker-agent#4672 · 1 commento · 1 reazione · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
-
pkg/hooks tests fail with a misleading assertion when jq is not installedForse già presa @dwin-gharibi l’ha presa 66 giorni fa. Apertaarea/testing
Difficoltà 2/5 1-3 ore Idoneità per principianti 86/100
docker/docker-agent#4052 ·
I maintainer di solito rispondono entro 1 giorno
-
`remove_directory` and `create_directory` hide work they already did when a later path failsForse già presa @dwin-gharibi l’ha presa 84 giorni fa. Apertaarea/tools
Difficoltà 2/5 1-3 ore Idoneità per principianti 85/100
docker/docker-agent#3933 ·
I maintainer di solito rispondono entro 1 giorno
-
`edit_file` silently edits the first match when `oldText` occurs more than onceForse già presa @dwin-gharibi l’ha presa 84 giorni fa. Apertaarea/tools
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
docker/docker-agent#3929 · 2 commenti ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di docker/docker-agent
Issue simili
-
Object Manager 1.13 resets a vCLU after sending a projectForse già presa @tciunelis l’ha presa oggi. Apertabug ready ticket
Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100
Domktorymysli/vclu#152 ·
I maintainer di solito rispondono entro 1 giorno
-
bug converter
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
grafana/sigma-rule-deployment#435 ·
I maintainer di solito rispondono entro 1 giorno
-
bug
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
I maintainer di solito rispondono entro 1 giorno
-
🤖 verification skills: harden check.sh and verify.sh argument and file handling (#391 follow-ups)Aperta
Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
google/go-containerregistry#2491 ·
I maintainer di solito rispondono entro 1 giorno