[GH-ISSUE #20875] feat: Allow insecure certificates for MCP server tools #34849

Closed
opened 2026-04-25 09:01:53 -05:00 by GiteaMirror · 1 comment
Owner

Originally created by @wolffberg on GitHub (Jan 22, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/20875

Check Existing Issues

  • I have searched for all existing open AND closed issues and discussions for similar requests. I have found none that is comparable to my request.

Verify Feature Scope

  • I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions.

Problem Description

If you have streamable-http MCP servers exposed behind HTTPS with custom signed certificates you cannot connect to them.

Desired Solution you'd like

There should be support for allowing untrusted certificates and maybe also adding custom CA certificates in the tool settings.

Both should also be configurable through environment variables and/or environment variable config JSON.

Alternatives Considered

You could inject custom CA certificates in the local trust store, but this feels too hacky.

Additional Context

No response

Originally created by @wolffberg on GitHub (Jan 22, 2026). Original GitHub issue: https://github.com/open-webui/open-webui/issues/20875 ### Check Existing Issues - [x] I have searched for all existing **open AND closed** issues and discussions for similar requests. I have found none that is comparable to my request. ### Verify Feature Scope - [x] I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions. ### Problem Description If you have streamable-http MCP servers exposed behind HTTPS with custom signed certificates you cannot connect to them. ### Desired Solution you'd like There should be support for allowing untrusted certificates and maybe also adding custom CA certificates in the tool settings. Both should also be configurable through environment variables and/or environment variable config JSON. ### Alternatives Considered You could inject custom CA certificates in the local trust store, but this feels too hacky. ### Additional Context _No response_
Author
Owner

@tjbck commented on GitHub (Jan 22, 2026):

Should be addressed with c7f996d593

<!-- gh-comment-id:3784689403 --> @tjbck commented on GitHub (Jan 22, 2026): Should be addressed with c7f996d593e4bb48103b91316204fe7e50e25b35
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#34849