requests==2.31.0
python-dotenv==1.0.0
flask==2.3.3
flask-cors==4.0.2
pytest==7.4.0
# Upper bound: mcp 2.0.0 removed `mcp.server.fastmcp`, which basecamp_fastmcp.py
# imports. Without `<2` a fresh install resolves 2.x and the server fails to
# start with ModuleNotFoundError.
# Lower bound: 1.28.1 is the first release patched against all known 1.x
# advisories — CVE-2026-59950 (< 1.28.1), CVE-2026-52869 and CVE-2026-52870
# (<= 1.27.1).
mcp[cli]>=1.28.1,<2
httpx>=0.25.0
anyio>=4.0.0

