Merge pull request #44 from appwrite/hide-healthz-access-logs

Hide health checks and publish Docker Hub images

Author: ChiragAgg5k

.github/workflows/production.yml

@@ -9,12 +9,17 @@ concurrency:
   group: ${{ github.workflow }}
   cancel-in-progress: false
 
+permissions:
+  contents: read
+  packages: write
+
 env:
   ENVIRONMENT: production
   PROJECT: mcp
   DECLARATIVE_OWNER: appwrite-labs
   DECLARATIVE_REPOSITORY: assets-applications
   REGISTRY_GITHUB: ghcr.io
+  REGISTRY_DOCKERHUB: docker.io
   IMAGE_NAME: appwrite/mcp
   TAG: ${{ github.event.release.tag_name || github.sha }}
 
@@ -32,12 +37,21 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Login to Docker Hub
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ env.REGISTRY_DOCKERHUB }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
       - name: Build and push
         uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
         with:
           context: .
           push: true
-          tags: ${{ env.REGISTRY_GITHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
+          tags: |
+            ${{ env.REGISTRY_GITHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
+            ${{ env.REGISTRY_DOCKERHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
 
   deploy:
     needs: build

.github/workflows/staging.yml

@@ -10,12 +10,17 @@ concurrency:
   group: ${{ github.workflow }}
   cancel-in-progress: false
 
+permissions:
+  contents: read
+  packages: write
+
 env:
   ENVIRONMENT: staging
   PROJECT: mcp
   DECLARATIVE_OWNER: appwrite-labs
   DECLARATIVE_REPOSITORY: assets-applications
   REGISTRY_GITHUB: ghcr.io
+  REGISTRY_DOCKERHUB: docker.io
   IMAGE_NAME: appwrite/mcp
   TAG: ${{ github.sha }}
 
@@ -33,12 +38,21 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Login to Docker Hub
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ env.REGISTRY_DOCKERHUB }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
       - name: Build and push
         uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
         with:
           context: .
           push: true
-          tags: ${{ env.REGISTRY_GITHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
+          tags: |
+            ${{ env.REGISTRY_GITHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
+            ${{ env.REGISTRY_DOCKERHUB }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
 
   deploy:
     needs: build

src/mcp_server_appwrite/http_app.py

@@ -15,7 +15,9 @@
 from __future__ import annotations
 
 import contextlib
+import copy
 import json
+import logging
 import sys
 
 from mcp.server.auth.middleware.auth_context import AuthContextMiddleware
@@ -49,6 +51,19 @@
 }
 
 
+class HealthzAccessLogFilter(logging.Filter):
+    """Drop noisy load-balancer health probes from uvicorn access logs."""
+
+    def filter(self, record: logging.LogRecord) -> bool:
+        args = record.args
+        if isinstance(args, tuple) and len(args) >= 3:
+            method = args[1]
+            path = str(args[2]).split("?", 1)[0]
+            return not (method == "GET" and path == "/healthz")
+
+        return "GET /healthz HTTP/" not in record.getMessage()
+
+
 def _log(message: str) -> None:
     print(f"[appwrite-mcp][http] {message}", file=sys.stderr, flush=True)
 
@@ -166,7 +181,14 @@ async def lifespan(app: Starlette):
 
 def run_http(*, host: str = "0.0.0.0", port: int = 8000) -> None:
     import uvicorn
+    from uvicorn.config import LOGGING_CONFIG
 
     app = build_app()
+    log_config = copy.deepcopy(LOGGING_CONFIG)
+    log_config.setdefault("filters", {})["hide_healthz"] = {
+        "()": "mcp_server_appwrite.http_app.HealthzAccessLogFilter"
+    }
+    log_config["handlers"]["access"]["filters"] = ["hide_healthz"]
+
     _log(f"Serving on http://{host}:{port}  (resource path: /mcp)")
-    uvicorn.run(app, host=host, port=port)
+    uvicorn.run(app, host=host, port=port, log_config=log_config)

tests/unit/test_http_app.py

@@ -0,0 +1,41 @@
+import logging
+import unittest
+
+from mcp_server_appwrite.http_app import HealthzAccessLogFilter
+
+
+class HealthzAccessLogFilterTests(unittest.TestCase):
+    def setUp(self):
+        self.filter = HealthzAccessLogFilter()
+
+    def _record(self, args):
+        return logging.LogRecord(
+            name="uvicorn.access",
+            level=logging.INFO,
+            pathname=__file__,
+            lineno=1,
+            msg='%s - "%s %s HTTP/%s" %d',
+            args=args,
+            exc_info=None,
+        )
+
+    def test_filters_healthz_access_logs(self):
+        record = self._record(("127.0.0.1:12345", "GET", "/healthz", "1.1", 200))
+
+        self.assertFalse(self.filter.filter(record))
+
+    def test_filters_healthz_access_logs_with_query_string(self):
+        record = self._record(
+            ("127.0.0.1:12345", "GET", "/healthz?ready=1", "1.1", 200)
+        )
+
+        self.assertFalse(self.filter.filter(record))
+
+    def test_keeps_non_healthz_access_logs(self):
+        record = self._record(("127.0.0.1:12345", "GET", "/mcp", "1.1", 401))
+
+        self.assertTrue(self.filter.filter(record))
+
+
+if __name__ == "__main__":
+    unittest.main()