From 73ec01a7221f4aeed6762c3a82edcd7fe5f5786d Mon Sep 17 00:00:00 2001
From: dandye <dandye@google.com>
Date: Thu, 13 Aug 2026 09:24:56 -0400
Subject: [PATCH] fix(gti-mcp): pin mcp>=1.23.0,<2.0 to resolve startup failure

Pin explicit version constraint for mcp to prevent incompatible mcp 2.x
installations from breaking FastMCP import at runtime.

- mcp>=1.23.0,<2.0: Restrict to compatible v1 FastMCP API
- Remove standalone fastmcp and uvicorn dependencies (not used directly by gti-mcp)

Fixes #277
---
 server/gti/pyproject.toml | 4 ++--
 server/gti/setup.py       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/server/gti/pyproject.toml b/server/gti/pyproject.toml
index 8d6937dd..20468f5d 100644
--- a/server/gti/pyproject.toml
+++ b/server/gti/pyproject.toml
@@ -18,8 +18,8 @@ classifiers = [
     "Topic :: Security",
 ]
 dependencies = [
-    "mcp",
-    "vt-py"
+    "mcp>=1.23.0,<2.0",
+    "vt-py",
 ]
 
 [project.urls]
diff --git a/server/gti/setup.py b/server/gti/setup.py
index a30d3d9d..38528885 100644
--- a/server/gti/setup.py
+++ b/server/gti/setup.py
@@ -22,7 +22,7 @@
     version="0.1.2",
     packages=setuptools.find_packages(),
     install_requires=[
-        "mcp",
+        "mcp>=1.23.0,<2.0",
         "vt-py",
     ],
     extras_require={