🗄️ PostgreSQL Database - Production-grade data storage with user_id filtering (Neon)
🚀 Multi-Client Support - Works with Claude Desktop, Continue, Cline, any MCP client
🔒 Authentication & Security
How Authentication Works:
1. Generate API key via /generate-key
2. API key hashed (SHA-256) before storage
3. User ID generated: user_{MD5(email)[:12]}
4. Add key to URL: ?api_key=fm_...
5. Server validates on each SSE connection
6. All queries filter by user_id for isolation
Security Features:
✅ One-Time Display (keys shown once)
✅ Hashed Storage (SHA-256, never plaintext)
✅ Database-Level Isolation (all tables have user_id)
✅ Deterministic User IDs (same email → same user_id)
✅ Production Safeguards (ENV-based SKIP_AUTH protection)
📋 What you'll need:
• Your email address (used to generate your unique user_id)
• Your name (optional)
🔐 What you'll get:
• API Key: fm_xxxxx... (show once, copy immediately!)
• User ID: user_xxxxx (deterministic from your email)
• All your data (orders/drivers/assignments) will be isolated by this user_id
""")
# POST - Generate API key
else:
try:
form_data = await request.form()
email = form_data.get("email")
name = form_data.get("name") or None
if not email:
return HTMLResponse("
Error: Email is required
", status_code=400)
result = db_generate_api_key(email, name)
if not result['success']:
return HTMLResponse(f"
Error: {result['error']}
", status_code=400)
# Success - show the API key (one time only!)
return HTMLResponse(f"""
Your FleetMind API Key
✅ API Key Generated!
Your API key has been created successfully
📧 Email: {result["email"]}
👤 Name: {result["name"]}
🆔 User ID:{result["user_id"]}
⚠️ SAVE THIS KEY NOW - IT WON'T BE SHOWN AGAIN!
🔑 Your API Key:
{result["api_key"]}
👥 Multi-Tenant Isolation
Your user_id ({result["user_id"]}) ensures complete data isolation:
✅ You will only see your own orders, drivers, and assignments
✅ All database operations automatically filter by your user_id
✅ Your user_id is deterministic - same email always gets same ID
✅ Even if you regenerate your API key, your user_id stays the same
💡 Important: The API key is included in the URL as a query parameter (?api_key=...)
🚀 Next Steps:
Copy your API key (click the button above)
Add it to your Claude Desktop config
Restart Claude Desktop
Start using FleetMind tools!
🔐 How Authentication Works:
Authentication Flow:
1️⃣ Connection: Claude Desktop connects to SSE endpoint with your API key in URL
2️⃣ Validation: Server hashes your key (SHA-256) and looks it up in database
3️⃣ User Extraction: Server retrieves your user_id: {result["user_id"]}
4️⃣ Data Isolation: All tool calls automatically filter by your user_id
5️⃣ Security: You can only access data associated with your user_id
""")
except Exception as e:
return HTMLResponse(f"
Error: {str(e)}
", status_code=500)
logger.info("[OK] Landing page added at / route")
logger.info("[OK] API key generation page added at /generate-key")
logger.info("[OK] MCP SSE endpoint available at /sse")
logger.info("[OK] Authentication handled by proxy.py (port 7860)")
# Run MCP server with SSE transport
# No middleware needed - proxy.py handles API key capture and injection
mcp.run(
transport="sse",
host=HF_SPACE_HOST,
port=HF_SPACE_PORT
)
except Exception as e:
logger.error(f"Failed to start server: {e}")
logger.error("Check that:")
logger.error(" 1. Database connection is configured (DB_HOST, DB_USER, etc.)")
logger.error(" 2. Google Maps API key is set (GOOGLE_MAPS_API_KEY)")
logger.error(" 3. Port 7860 is available")
raise