Bridge MCP bearer token into fast-agent request context

scripts/hub_search_prefab_server.py

@@ -57,10 +57,12 @@ if str(SCRIPTS_DIR) not in sys.path:
     sys.path.insert(0, str(SCRIPTS_DIR))
 
 from fast_agent import FastAgent
+from fast_agent.mcp.auth.context import request_bearer_token
 from fast_agent.mcp.auth.middleware import HFAuthHeaderMiddleware
 from fast_agent.mcp.auth.presence import PresenceTokenVerifier
 from fastmcp import FastMCP
 from fastmcp.server.auth.auth import RemoteAuthProvider
+from fastmcp.server.dependencies import get_access_token
 from fastmcp.tools import ToolResult
 from mcp.types import TextContent
 from pydantic import AnyHttpUrl
@@ -137,18 +139,31 @@ async def root_info(request) -> PlainTextResponse:
 
 
 async def _run_raw(query: str) -> str:
-    async with fast.run() as agents:
-        return await getattr(agents, RAW_AGENT).send(query)
+    return await _run_agent(RAW_AGENT, query)
 
 
 async def _run_prefab_native(query: str) -> str:
-    async with fast.run() as agents:
-        return await getattr(agents, PREFAB_NATIVE_AGENT).send(query)
+    return await _run_agent(PREFAB_NATIVE_AGENT, query)
 
 
 async def _run_prefab_llm_chain(query: str) -> str:
-    async with fast.run() as agents:
-        return await getattr(agents, PREFAB_LLM_CHAIN_AGENT).send(query)
+    return await _run_agent(PREFAB_LLM_CHAIN_AGENT, query)
+
+
+def _get_request_bearer_token() -> str | None:
+    access_token = get_access_token()
+    if access_token is None:
+        return None
+    return access_token.token
+
+
+async def _run_agent(agent_name: str, query: str) -> str:
+    saved_token = request_bearer_token.set(_get_request_bearer_token())
+    try:
+        async with fast.run() as agents:
+            return await getattr(agents, agent_name).send(query)
+    finally:
+        request_bearer_token.reset(saved_token)
 
 
 def _wire_tool_result(wire: dict[str, object]) -> ToolResult: