Settings

FastMCP uses pydantic-settings for configuration. Every setting is available as an environment variable with a FASTMCP_ prefix. Settings are loaded from environment variables and from a .env file.

# Set via environment
export FASTMCP_LOG_LEVEL=DEBUG
export FASTMCP_PORT=3000

# Or use a .env file (loaded automatically)
echo "FASTMCP_LOG_LEVEL=DEBUG" >> .env

You can change which .env file is loaded by setting the FASTMCP_ENV_FILE environment variable (defaults to .env). Because this controls which file is loaded, it must be set as an environment variable — it cannot be set inside a .env file itself.

Logging

Environment Variable	Type	Default	Description
`FASTMCP_LOG_LEVEL`	`Literal["DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"]`	`INFO`	Log level for FastMCP’s own logging output. Case-insensitive.
`FASTMCP_LOG_ENABLED`	`bool`	`true`	Enable or disable FastMCP logging entirely.
`FASTMCP_CLIENT_LOG_LEVEL`	`Literal["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"]`	None	Default minimum log level for messages sent to MCP clients via `context.log()`. When set, messages below this level are suppressed. Handshake-era clients can override this per-session using the MCP `logging/setLevel` request; the modern protocol has no session to hold that level, so clients on it filter by level in their own log handler instead.
`FASTMCP_ENABLE_RICH_LOGGING`	`bool`	`true`	Use rich formatting for log output. Set to `false` for plain Python logging.
`FASTMCP_ENABLE_RICH_TRACEBACKS`	`bool`	`true`	Use rich tracebacks for errors.
`FASTMCP_DEPRECATION_WARNINGS`	`bool`	`true`	Show deprecation warnings.
`FASTMCP_MCP_CAMELCASE_COMPAT`	`bool`	`true`	Bridge legacy camelCase reads on MCP SDK objects (e.g. `tool.inputSchema`, `result.isError`) to their snake_case fields after the SDK v2 rename. Each bridged read emits a `FastMCPDeprecationWarning`. Set to `false` to disable the shims, in which case only the snake_case names resolve.

Transport & HTTP

These control how the server listens when running with an HTTP transport.

Environment Variable	Type	Default	Description
`FASTMCP_TRANSPORT`	`Literal["stdio", "http", "sse", "streamable-http"]`	`stdio`	Default transport.
`FASTMCP_HOST`	`str`	`127.0.0.1`	Host to bind to.
`FASTMCP_PORT`	`int`	`8000`	Port to bind to.
`FASTMCP_SSE_PATH`	`str`	`/sse`	Path for SSE endpoint.
`FASTMCP_MESSAGE_PATH`	`str`	`/messages/`	Path for SSE message endpoint.
`FASTMCP_STREAMABLE_HTTP_PATH`	`str`	`/mcp`	Path for Streamable HTTP endpoint.
`FASTMCP_STATELESS_HTTP`	`bool`	`false`	Enable stateless HTTP mode (new transport per request). Useful for multi-worker deployments.
`FASTMCP_JSON_RESPONSE`	`bool`	`false`	Use JSON responses instead of SSE for Streamable HTTP.
`FASTMCP_HTTP_HOST_ORIGIN_PROTECTION`	`bool \| "auto"`	`false`	Validate `Host` and browser `Origin` headers for Streamable HTTP and SSE requests. `auto` protects localhost-bound servers and explicit host/origin allowlists. `false` disables this guard and FastMCP’s DNS-rebinding protection for the endpoint.
`FASTMCP_HTTP_ALLOWED_HOSTS`	`list[str] \| null`	`null`	Additional trusted hostnames when Host and Origin protection is enabled. Use a JSON array, such as `["mcp.example.com"]`.
`FASTMCP_HTTP_ALLOWED_ORIGINS`	`list[str] \| null`	`null`	Browser origins trusted when Host and Origin protection is enabled. Configure CORS separately for cross-origin browser reads. Use a JSON array, such as `["https://app.example.com"]`.
`FASTMCP_HTTP_SESSION_IDLE_TIMEOUT`	`float \| null`	`null`	Seconds a Streamable HTTP session may remain idle before it is terminated. The deadline resets on every request. When `null`, sessions never expire from inactivity. Not supported in stateless mode.
`FASTMCP_DEBUG`	`bool`	`false`	Enable debug mode.

Error Handling

Environment Variable	Type	Default	Description
`FASTMCP_MASK_ERROR_DETAILS`	`bool`	`false`	Mask error details before sending to clients. When enabled, only messages from explicitly raised `ToolError`, `ResourceError`, or `PromptError` are included in responses.
`FASTMCP_STRICT_INPUT_VALIDATION`	`bool`	`false`	Strictly validate tool inputs against the JSON schema. When disabled, compatible inputs are coerced (e.g., the string `"10"` becomes the integer `10`).
`FASTMCP_MOUNTED_COMPONENTS_RAISE_ON_LOAD_ERROR`	`bool`	`false`	Raise errors when loading mounted components instead of logging warnings.

Client

Environment Variable	Type	Default	Description
`FASTMCP_CLIENT_INIT_TIMEOUT`	`float \| None`	None	Timeout in seconds for the client initialization handshake. Set to `0` or leave unset to disable.
`FASTMCP_CLIENT_DISCONNECT_TIMEOUT`	`float`	`5`	Maximum time in seconds to wait for a clean disconnect before giving up.
`FASTMCP_TASKS_CLIENT_POLL_INTERVAL`	`float`	`0.5`	Ceiling in seconds for the fallback poll backoff while waiting on a background task. Requires the `fastmcp-tasks` package. Applies only when the server does not advertise its own `pollInterval`: in that case `Task.wait()` starts polling fast (~20ms) and doubles up to this ceiling rather than polling at a fixed cadence. When the server advertises a `pollInterval`, that interval is honored exactly and this setting is ignored.
`FASTMCP_CLIENT_RAISE_FIRST_EXCEPTIONGROUP_ERROR`	`bool`	`true`	When an `ExceptionGroup` is raised, re-raise the first error directly instead of the group. Simplifies debugging but may mask secondary errors.

CLI & Display

Environment Variable	Type	Default	Description
`FASTMCP_SHOW_SERVER_BANNER`	`bool`	`true`	Show the server banner on startup. Also controllable via `--no-banner` or `server.run(show_banner=False)`.
`FASTMCP_CHECK_FOR_UPDATES`	`Literal["stable", "prerelease", "off"]`	`stable`	Update checking on CLI startup. `stable` checks stable releases only, `prerelease` includes pre-releases, `off` disables checking.

Telemetry

Environment Variable	Type	Default	Description
`FASTMCP_TELEMETRY_MODE`	`Literal["native", "propagation_only", "off"]`	`native`	Controls FastMCP’s native OpenTelemetry instrumentation. `native` emits FastMCP’s MCP spans and propagates trace context; because FastMCP uses only the OpenTelemetry API, this costs almost nothing unless an SDK and exporter are configured. `propagation_only` keeps `_meta` trace propagation and still parents downstream spans from the incoming context, but emits none of FastMCP’s own spans, so another instrumentation layer can own the MCP span hierarchy. `off` is a full pass-through: no spans, and no trace context extracted or attached.

Tasks (Docket)

Task settings (the FASTMCP_DOCKET_ and FASTMCP_TASKS_ variables) live in the optional fastmcp-tasks package. See server tasks for configuration, including FASTMCP_TASKS_ENCRYPTION_KEY for encrypting task snapshots at rest.

Security

These control FastMCP’s SSRF protection for the outbound fetches it makes during authentication (OAuth client metadata and JWKS).

Environment Variable	Type	Default	Description
`FASTMCP_SSRF_TRUST_PROXY`	`bool`	`false`	Trust an outbound HTTP proxy for SSRF-protected fetches. When `false`, FastMCP resolves the target hostname itself and refuses to connect if it maps to a private, loopback, link-local, or reserved IP. When `true`, FastMCP routes auth metadata and JWKS fetches through the configured `HTTPS_PROXY`/`ALL_PROXY` and does not honor `NO_PROXY`; if no proxy is configured the fetch is refused.

By default, FastMCP protects its OAuth and JWKS fetches against SSRF by resolving the target hostname, rejecting any address that maps to a private, loopback, link-local, or reserved IP, and then pinning the connection to that validated IP. Setting FASTMCP_SSRF_TRUST_PROXY=true disables FastMCP’s local DNS/IP checks and connection pinning. This reduces SSRF protection unless the configured proxy enforces equivalent destination restrictions. FastMCP verifies that a proxy is configured, but does not verify its security policy. This breaks when a corporate CONNECT proxy is the only egress path: the container often cannot resolve external DNS at all (only the proxy can), and even when it can, pinning to the IP makes TLS verification fail because public certificates list hostnames, not IP addresses. Set FASTMCP_SSRF_TRUST_PROXY=true when a trusted proxy is your mandated egress. FastMCP then skips DNS resolution and the IP blocklist entirely and makes a single request to the hostname URL, explicitly routed through the proxy named by the standard HTTPS_PROXY / ALL_PROXY environment variables (checked in that order). The HTTPS-only and hostname checks still apply.

This is a deliberate trust shift: the IP blocklist cannot be enforced through a proxy (the proxy does its own DNS, so an address FastMCP resolved is not the one the proxy dials). Only enable it when the proxy itself is trusted to mediate egress.FastMCP reads the proxy URL from the environment and passes it to the HTTP client explicitly, with the client’s own environment-based proxy routing turned off — so the request either goes through that exact proxy or fails outright, with no routing decision left for the client to make on its own. One consequence: NO_PROXY is not honored in this mode. A host that NO_PROXY would otherwise exclude is still routed through the configured proxy rather than fetched direct with the IP blocklist disabled — the safer of the two options, since the blocklist cannot apply to a direct fetch here anyway. If you set FASTMCP_SSRF_TRUST_PROXY=true but neither HTTPS_PROXY nor ALL_PROXY is present in the server process’s environment (an HTTP_PROXY alone never routes these HTTPS-only fetches), the request would otherwise go out direct with the IP blocklist disabled — no SSRF protection at all. Rather than send it, FastMCP refuses the fetch and raises SSRFError with an actionable message. The contract is crisp: proxy-trust mode delegates SSRF protection to the proxy, and with no proxy configured the fetch cannot proceed. Enable this setting only together with an active proxy that routes your auth endpoints.

Advanced

Environment Variable	Type	Default	Description
`FASTMCP_HOME`	`Path`	Platform default	Data directory for FastMCP. Defaults to the platform-specific user data directory.
`FASTMCP_ENV_FILE`	`str`	`.env`	Path to the `.env` file to load settings from. Must be set as an environment variable (see above).
`FASTMCP_SERVER_DEPENDENCIES`	`list[str]`	`[]`	Additional dependencies to install in the server environment.
`FASTMCP_TEST_MODE`	`bool`	`false`	Enable test mode.

Get Started

Servers

Apps

Clients

Integrations

More

Logging

Transport & HTTP

Error Handling

Client

CLI & Display

Telemetry

Tasks (Docket)

Security

Advanced

​Logging

​Transport & HTTP

​Error Handling

​Client

​CLI & Display

​Telemetry

​Tasks (Docket)

​Security

​Advanced

Logging

Transport & HTTP

Error Handling

Client

CLI & Display

Telemetry

Tasks (Docket)

Security

Advanced