Repository navigation
Patch over v0.4.0. The MCP server's FastMCP transport security validated the request Host header and returned 421 Misdirected Request for any client not connecting as localhost — including Hermes in Docker (host.docker.internal:8765), the LAN IP, and speedwatch.e49ta.com. Disabled FastMCP's DNS-rebinding Host check; the real auth boundary is the API-key gate. Restart the service to apply.