Skip to content

Releases: cloudera/CAI_Workbench_MCP_Server

CAI Workbench MCP Release version v1.0.0

23 Oct 18:14
9a87702

Choose a tag to compare

Release v1.0.0: Initial public release with security enhancements
🎉 First Public Release

This release represents the initial stable version of the Cloudera AI Workbench MCP Server
with comprehensive security fixes, testing infrastructure, and public repository
setup.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Security Enhancements (Critical)

Fixed critical security vulnerability affecting 46 functions:

Replaced subprocess.run() calls with secure requests library
API keys no longer exposed in process lists (ps/top)
All HTTP calls now use secure header-based authentication
Added 30-second timeouts to prevent hanging requests
Impact: Eliminated API key exposure vulnerability across entire codebase

Files affected:

All create_* functions (7 files)
All delete_* functions (10 files)
All update_* functions (10 files)
All get_* functions (9 files)
All list_* functions (8 files)
All stop_/restart_ functions (4 files)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Testing Infrastructure

Added comprehensive test suite for CI/CD:

test_all_functions.py: 11 unit tests covering all 47+ MCP tools
test_cai_mcp_client.py: FastMCP integration tests
Security vulnerability detection tests
Function signature validation tests
Response structure validation tests
Error handling tests
CI/CD Automation
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Added GitHub Actions workflow:

Automated testing on all PRs
Security scanning
Multi-version Python testing (3.10, 3.11, 3.12)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Features

47+ MCP tools for Cloudera ML operations:

Project management (list, create, update, delete)
Job orchestration (create, run, monitor, stop)
Model lifecycle (build, deploy, manage)
Experiment tracking (create, log, query)
Application management (create, start, stop, restart)
File operations (upload, download, list, delete)
Protocols supported:

FastMCP-based HTTP server(experimental)
FastMCP-based stdio server(recommended)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Core dependencies:

fastmcp>=2.11.0 (MCP protocol implementation)
requests>=2.28.0 (secure HTTP client)
python-dotenv>=1.0.0 (configuration management)
fastapi>=0.115.0 (HTTP server)
pyjwt>=2.8.0 (OAuth 2.1 support)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Ready For

Production deployment
CI/CD pipeline integration
Public contributions
Security audits
Docker/Claude Desktop integration

License: Apache-2.0