github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-08 04:16:03 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

[GH-ISSUE #12379] issue: API key not sent to tool server #16575

New Issue
Closed
opened 2026-04-19 22:28:10 -05:00 by GiteaMirror · 3 comments
GiteaMirror commented 2026-04-19 22:28:10 -05:00
Owner
Copy Link

Originally created by @NN708 on GitHub (Apr 3, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12379

Check Existing Issues

  • I have searched the existing issues and discussions.
  • I am using the latest version of Open WebUI.

Installation Method

Docker

Open WebUI Version

v0.6.0

Ollama Version (if applicable)

No response

Operating System

Vanilla OS 2

Browser (if applicable)

No response

Confirmation

  • I have read and followed all instructions in README.md.
  • I am using the latest version of both Open WebUI and Ollama.
  • I have included the browser console logs.
  • I have included the Docker container logs.
  • I have listed steps to reproduce the bug in detail.

Expected Behavior

When making requests to external tool servers, the request should be successfully authenticated.

Actual Behavior

The configured API key is not being included in the request headers, leading to a 401 Unauthorized error.

Steps to Reproduce

  1. Run mcpo with --api-key MY_API_KEY.
  2. Add MY_API_KEY to the tools settings in Open WebUI.
  3. Send a chat message that triggers a request to the tool servers.

Logs & Screenshots

"POST /mcp/xxx HTTP/1.1" 401 Unauthorized

Additional Information

No response

Originally created by @NN708 on GitHub (Apr 3, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/12379 ### Check Existing Issues - [x] I have searched the existing issues and discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Docker ### Open WebUI Version v0.6.0 ### Ollama Version (if applicable) _No response_ ### Operating System Vanilla OS 2 ### Browser (if applicable) _No response_ ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have listed steps to reproduce the bug in detail. ### Expected Behavior When making requests to external tool servers, the request should be successfully authenticated. ### Actual Behavior The configured API key is not being included in the request headers, leading to a 401 Unauthorized error. ### Steps to Reproduce 1. Run `mcpo` with `--api-key MY_API_KEY`. 2. Add `MY_API_KEY` to the tools settings in Open WebUI. 3. Send a chat message that triggers a request to the tool servers. ### Logs & Screenshots ``` "POST /mcp/xxx HTTP/1.1" 401 Unauthorized ``` ### Additional Information _No response_
GiteaMirror added the bug label 2026-04-19 22:28:10 -05:00
GiteaMirror commented 2026-04-19 22:28:12 -05:00
Author
Owner
Copy Link

@tjbck commented on GitHub (Apr 3, 2025):

Addressed with 2277566ce1, 0.6.1 will be released soon.

<!-- gh-comment-id:2774254041 --> @tjbck commented on GitHub (Apr 3, 2025): Addressed with 2277566ce1b7bf24e227be8a0091011cb13a1122, 0.6.1 will be released soon.
GiteaMirror commented 2026-04-19 22:28:13 -05:00
Author
Owner
Copy Link

@NN708 commented on GitHub (Apr 3, 2025):

Thanks for the quick fix!

<!-- gh-comment-id:2774281126 --> @NN708 commented on GitHub (Apr 3, 2025): Thanks for the quick fix!
GiteaMirror commented 2026-04-19 22:28:14 -05:00
Author
Owner
Copy Link

@phamkhactu commented on GitHub (Apr 22, 2025):

Hi @tjbck, @NN708

I have the same problem with v0.6.5

% uvx mcpo --port 8089 --api-key "123a@" -- uvx mcp-server-time --local-timezone=America/New_York
Installed 34 packages in 92ms
Starting MCP OpenAPI Proxy on 0.0.0.0:8089 with command: uvx mcp-server-time --local-timezone=America/New_York
INFO:     Started server process [2068171]
INFO:     Waiting for application startup.
Installed 22 packages in 31ms
INFO:     Application startup complete.
INFO:     Uvicorn running on http://0.0.0.0:8089 (Press CTRL+C to quit)
INFO:     127.0.0.1:49320 - "GET / HTTP/1.1" 404 Not Found
INFO:     127.0.0.1:49320 - "GET /favicon.ico HTTP/1.1" 404 Not Found
INFO:     127.0.0.1:49320 - "GET /d%C3%B3c HTTP/1.1" 404 Not Found
INFO:     127.0.0.1:49320 - "GET /docs HTTP/1.1" 200 OK
INFO:     127.0.0.1:49320 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52856 - "OPTIONS /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52868 - "GET /openapi.json HTTP/1.1" 200 OK
INFO:     10.168.5.138:52937 - "OPTIONS /get_current_time HTTP/1.1" 200 OK
INFO:     10.168.5.138:52937 - "POST /get_current_time HTTP/1.1" 401 Unauthorized
<!-- gh-comment-id:2820026049 --> @phamkhactu commented on GitHub (Apr 22, 2025): Hi @tjbck, @NN708 I have the same problem with v0.6.5 ``` % uvx mcpo --port 8089 --api-key "123a@" -- uvx mcp-server-time --local-timezone=America/New_York Installed 34 packages in 92ms Starting MCP OpenAPI Proxy on 0.0.0.0:8089 with command: uvx mcp-server-time --local-timezone=America/New_York INFO: Started server process [2068171] INFO: Waiting for application startup. Installed 22 packages in 31ms INFO: Application startup complete. INFO: Uvicorn running on http://0.0.0.0:8089 (Press CTRL+C to quit) INFO: 127.0.0.1:49320 - "GET / HTTP/1.1" 404 Not Found INFO: 127.0.0.1:49320 - "GET /favicon.ico HTTP/1.1" 404 Not Found INFO: 127.0.0.1:49320 - "GET /d%C3%B3c HTTP/1.1" 404 Not Found INFO: 127.0.0.1:49320 - "GET /docs HTTP/1.1" 200 OK INFO: 127.0.0.1:49320 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52856 - "OPTIONS /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52856 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52868 - "GET /openapi.json HTTP/1.1" 200 OK INFO: 10.168.5.138:52937 - "OPTIONS /get_current_time HTTP/1.1" 200 OK INFO: 10.168.5.138:52937 - "POST /get_current_time HTTP/1.1" 401 Unauthorized ```
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#16575
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?