Merge pull request #2 from cloudera/dev

[Khauneesh-AI]

Public Release

This release represents the initial stable version of the Cloudera ML MCP Server with comprehensive security fixes, testing infrastructure, and public repository setup.

🔒 Security Enhancements (Critical)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Fixed critical security vulnerability affecting 46 functions:

Replaced subprocess.run() calls with secure requests library
API keys no longer exposed in process lists (ps/top)
All HTTP calls now use secure header-based authentication
Added 30-second timeouts to prevent hanging requests
Impact: Eliminated API key exposure vulnerability across entire codebase

Files affected:

All create_* functions (7 files)
All delete_* functions (10 files)
All update_* functions (10 files)
All get_* functions (9 files)
All list_* functions (8 files)
All stop_/restart_ functions (4 files)
🧪 Testing Infrastructure
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Added comprehensive test suite for CI/CD:

test_all_functions.py: 11 unit tests covering all 47+ MCP tools
test_cml_mcp_client.py: FastMCP integration tests
Security vulnerability detection tests
Function signature validation tests
Response structure validation tests
Error handling tests
CI/CD Automation
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Added GitHub Actions workflow:

Automated testing on all PRs
Security scanning
Multi-version Python testing (3.10, 3.11, 3.12)
Automated PyPI publishing on release tags
Features
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

47+ MCP tools for Cloudera ML operations:

Project management (list, create, update, delete)
Job orchestration (create, run, monitor, stop)
Model lifecycle (build, deploy, manage)
Experiment tracking (create, log, query)
Application management (create, start, stop, restart)
File operations (upload, download, list, delete)
Protocols supported:

FastMCP-based HTTP server(experimental)
FastMCP-based stdio server(recommended)
Dependencies
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Core dependencies:

fastmcp>=2.11.0 (MCP protocol implementation)
requests>=2.28.0 (secure HTTP client)
python-dotenv>=1.0.0 (configuration management)
fastapi>=0.115.0 (HTTP server)
pyjwt>=2.8.0 (OAuth 2.1 support)
Ready For
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Production deployment
CI/CD pipeline integration
Public contributions
Security audits
Docker/Claude Desktop integration
License: Apache-2.0
Repository: https://github.com/cloudera/CML_MCP_Server