From 6fae5a81a81fd192d0223b2a3d9fe941c1f6dbbb Mon Sep 17 00:00:00 2001
From: Bernardo Gomes <bernardo.gomes.abreu@g.globo>
Date: Thu, 21 Aug 2025 09:34:25 -0300
Subject: [PATCH] Add documentation for forwarding HTTP headers in MCP server

---
 docs/configurations/customization.mdx | 32 ++++++++++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/docs/configurations/customization.mdx b/docs/configurations/customization.mdx
index 9a19600..a7d7772 100644
--- a/docs/configurations/customization.mdx
+++ b/docs/configurations/customization.mdx
@@ -45,6 +45,7 @@ mcp.mount_http()
 ## Customizing Exposed Endpoints
 
 You can control which FastAPI endpoints are exposed as MCP tools using Open API operation IDs or tags to:
+
 - Only include specific operations
 - Exclude specific operations
 - Only include operations with specific tags
@@ -121,6 +122,7 @@ The relevant arguments for these configurations are `include_operations`, `exclu
     )
     mcp.mount_http()
     ```
+
 </CodeGroup>
 
 ### Notes on filtering
@@ -128,4 +130,32 @@ The relevant arguments for these configurations are `include_operations`, `exclu
 - You cannot use both `include_operations` and `exclude_operations` at the same time
 - You cannot use both `include_tags` and `exclude_tags` at the same time
 - You can combine operation filtering with tag filtering (e.g., use `include_operations` with `include_tags`)
-- When combining filters, a greedy approach will be taken. Endpoints matching either criteria will be included
\ No newline at end of file
+- When combining filters, a greedy approach will be taken. Endpoints matching either criteria will be included
+
+## Forwarding HTTP headers
+
+By default the MCP server will forward the `Authorization` header from an incoming MCP request to the underlying FastAPI endpoint when invoking tools. You can customize the list of forwarded headers when creating `FastApiMCP` by passing the `headers` parameter (a list of header names). The comparison is case-insensitive.
+
+Example — forward a custom `X-API-Key` header in addition to `Authorization`:
+
+```python
+from fastapi import FastAPI
+from fastapi_mcp import FastApiMCP
+
+app = FastAPI()
+
+mcp = FastApiMCP(
+    app,
+    name="My API MCP",
+    description="Very cool MCP server",
+    headers=["authorization", "x-api-key"],  # add any header names you want forwarded
+)
+
+mcp.mount_http()
+```
+
+Notes:
+
+- Header names are normalized to lower-case internally, so provide regular header names (for example `X-API-Key` or `x-api-key`).
+- Only headers present on the incoming MCP request will be forwarded. If you use custom transports or proxies, ensure the header arrives at the MCP endpoint.
+- Be careful forwarding sensitive headers. Only include headers that are intended to be proxied to the underlying API endpoints.