Skip to main content

Network

Network Security​

Secure network boundaries protect authentication tokens, notebook contents, and kernel execution traffic between MCP clients, Jupyter MCP Server, and Jupyter infrastructure.

HTTPS/TLS​

Production Requirement

Always use HTTPS in production environments to encrypt all communication, including authentication tokens.

Example HTTPS Configuration​

{
  "env": {
    "JUPYTER_URL": "https://jupyter.example.com:8888",
    "JUPYTER_TOKEN": "your-token-here"
  }
}

Firewall Configuration​

Ensure appropriate firewall rules:

STDIO Transport:

  • No inbound ports needed (uses standard input/output)
  • Outbound access to Jupyter server required

Streamable HTTP Transport:

  • Inbound port (default: 4040) for MCP client connections
  • Outbound access to Jupyter server required

Network Isolation​

For sensitive deployments:

  1. Private Networks: Run Jupyter and MCP server on private networks
  2. VPN Access: Require VPN for accessing Jupyter infrastructure
  3. IP Whitelisting: Restrict Jupyter server access to known IP ranges