mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 19:08:59 -05:00
[GH-ISSUE #19778] issue: Streamable HTTP Notion MCP server doesn't stay enabled after authorizing #18990
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Sam-Horry on GitHub (Dec 5, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/19778
Check Existing Issues
Installation Method
Docker
Open WebUI Version
v0.6.41
Ollama Version (if applicable)
No response
Operating System
Debian 12
Browser (if applicable)
Firefox 145.0.1
Confirmation
README.md.Expected Behavior
Notion MCP tool is enabled after being redirected from the Notion OAuth page back to my Open WebUI instance.
Actual Behavior
When toggling the tool in the chat interface, I am redirected to the Notion Auth page. After authorizing, I am redirected back to my Open WebUI instance, but the Notion tool is not toggled on, and therefore not enabled. I try toggling it on again, get sent back to the Auth page, and this repeats.
(Trying to connect to the public Notion MCP server
Steps to Reproduce
Logs & Screenshots
2025-12-05 11:15:36.786 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:39234 - "GET /oauth/clients/mcp%3Antn/authorize HTTP/1.1" 302
2025-12-05 11:15:37.149 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:39234 - "GET /_app/version.json HTTP/1.1" 304
2025-12-05 11:15:37.488 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:39234 - "GET /api/version HTTP/1.1" 200
2025-12-05 11:15:45.032 | ERROR | open_webui.routers.openai:send_get_request:85 - Connection error:
2025-12-05 11:15:57.524 | INFO | httpx._client:_send_single_request:1740 - HTTP Request: POST https://mcp.notion.com/token "HTTP/1.1 200 OK"
2025-12-05 11:15:57.526 | ERROR | open_webui.models.oauth_sessions:_decrypt_token:105 - Error decrypting tokens:
2025-12-05 11:15:57.526 | ERROR | open_webui.models.oauth_sessions:get_sessions_by_user_id:213 - Error getting OAuth sessions by user ID:
2025-12-05 11:15:57.539 | INFO | open_webui.utils.oauth:handle_callback:773 - Stored OAuth session server-side for user , client_id mcp:ntn
2025-12-05 11:15:57.540 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /oauth/clients/mcp%3Antn/callback?code= HTTP/1.1" 307
2025-12-05 11:15:57.658 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /static/custom.css HTTP/1.1" 304
2025-12-05 11:15:57.666 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /static/loader.js HTTP/1.1" 304
2025-12-05 11:15:57.681 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /static/splash.png HTTP/1.1" 304
2025-12-05 11:15:57.927 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /static/splash-dark.png HTTP/1.1" 304
2025-12-05 11:15:58.635 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/config HTTP/1.1" 200
2025-12-05 11:15:58.674 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/auths/ HTTP/1.1" 200
2025-12-05 11:15:59.023 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/config HTTP/1.1" 200
2025-12-05 11:15:59.025 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /api/v1/users/user/settings HTTP/1.1" 200
2025-12-05 11:15:59.129 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42474 - "GET /api/version HTTP/1.1" 200
2025-12-05 11:15:59.141 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/users/user/settings HTTP/1.1" 200
2025-12-05 11:15:59.141 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /api/v1/configs/banners HTTP/1.1" 200
2025-12-05 11:15:59.167 | ERROR | open_webui.models.oauth_sessions:_decrypt_token:105 - Error decrypting tokens:
2025-12-05 11:15:59.167 | ERROR | open_webui.models.oauth_sessions:get_session_by_provider_and_user_id:196 - Error getting OAuth session by provider and user ID:
2025-12-05 11:15:59.167 | WARNING | open_webui.utils.oauth:get_oauth_token:572 - No OAuth session found for user , client_id mcp:ntn
2025-12-05 11:15:59.168 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42474 - "GET /api/v1/tools/ HTTP/1.1" 200
2025-12-05 11:15:59.170 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42482 - "GET /static/favicon.png HTTP/1.1" 200
2025-12-05 11:15:59.215 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /api/v1/users//profile/image HTTP/1.1" 200
2025-12-05 11:15:59.216 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/channels/ HTTP/1.1" 200
2025-12-05 11:15:59.223 | INFO | open_webui.routers.openai:get_all_models:476 - get_all_models()
2025-12-05 11:15:59.258 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/folders/ HTTP/1.1" 200
2025-12-05 11:15:59.260 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42450 - "GET /api/v1/chats/all/tags HTTP/1.1" 200
2025-12-05 11:15:59.304 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/chats/pinned HTTP/1.1" 200
2025-12-05 11:15:59.328 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42446 - "GET /api/v1/chats/?page=1 HTTP/1.1" 200
2025-12-05 11:16:10.032 | ERROR | open_webui.routers.openai:send_get_request:85 - Connection error:
2025-12-05 11:16:10.034 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42482 - "GET /api/models HTTP/1.1" 200
2025-12-05 11:16:10.285 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42482 - "GET /api/v1/models/model/profile/image?id=undefined&lang=en-GB HTTP/1.1" 200
2025-12-05 11:16:10.374 | ERROR | open_webui.models.oauth_sessions:_decrypt_token:105 - Error decrypting tokens:
2025-12-05 11:16:10.375 | ERROR | open_webui.models.oauth_sessions:get_session_by_provider_and_user_id:196 - Error getting OAuth session by provider and user ID:
2025-12-05 11:16:10.375 | WARNING | open_webui.utils.oauth:get_oauth_token:572 - No OAuth session found for user , client_id mcp:ntn
2025-12-05 11:16:10.376 | INFO | uvicorn.protocols.http.httptools_impl:send:476 - 172.24.0.1:42482 - "GET /api/v1/tools/ HTTP/1.1" 200
Additional Information
My Open WebUI instance isnt publicly hosted, so i access it from my laptop by using my pi's tailscale address. I don't know if this has something to do with the fact that I am connecting to it via tailscale and the callback doesn't like that, but I don't get any connection error in the web interface that suggests what is going on.
@owui-terminator[bot] commented on GitHub (Dec 5, 2025):
🔍 Similar Issues Found
I found some existing issues that might be related to this one. Please check if any of these are duplicates or contain helpful solutions:
#19148 issue: Verify OAuth mcp server sends incorrect authorization header
by Oleg52 • Nov 12, 2025 •
bug#18316 issue: 0.6.33: When two or more Streamable(!) MCP servers are selected, the OpenWebUI-python3 process goes to 100% and stays there.
by netmb • Oct 14, 2025 •
bug#19755 issue: Error: 404, message='Not Found', url='http://ollama:11434/api/embed'
by stevewillett • Dec 04, 2025 •
bug#17817 issue: MCP tool calls are sent to wrong server when multiple streamable-http MCP servers are enabled, causing 'MCP error -32602: Tool not found'
by eric2788 • Sep 27, 2025 •
bug#19116 issue: MCP OAuth 2.1 client registration fails when policy_uri, client_uri, logo_uri or tos_uri are not set
by xqqp • Nov 11, 2025 •
bugShow 5 more related issues
#16452 issue: Streaming response not iterable error - Organization Not Verified
by jamesmalin • Aug 10, 2025 •
bug#19154 issue: model streaming parameter set to True, even though the setting is set to False
by DirkRemmers • Nov 13, 2025 •
bug#19564 issue: MCP Tool Validation Fails Due to Missing "text/event-stream" Accept Header (Strict Spec Compliance)
by AdBaWa • Nov 28, 2025 •
bug#19496 issue: 500 internal server error appears in v0.6.40
by cloudtuotuo • Nov 26, 2025 •
bug#19563 issue:
by naruto7g • Nov 28, 2025 •
bug💡 Tips:
This comment was generated automatically by a bot. Please react with a 👍 if this comment was helpful, or a 👎 if it was not.
@Classic298 commented on GitHub (Dec 5, 2025):
@silentoplayz
@silentoplayz commented on GitHub (Dec 5, 2025):
@Sam-Horry Based on what I was told (AFAIK), and as a result, what has been documented is simply intended behavior of Notion's MCP server. They want you to re-authenticate yourself all the time.
Source: https://docs.openwebui.com/tutorials/integrations/mcp-notion#method-1-streamable-http-recommended
@silentoplayz commented on GitHub (Dec 5, 2025):
I'm providing this screenshot with a few messages sent between the maintainer of Open WebUI and I as a behind-the-scenes look into what went on with the decision making behind the security related admonition that notifies the user about re-authentication frequency.