From a4b9d161a4c33a4093b985b3a8e1b4fbcc16cb1e Mon Sep 17 00:00:00 2001 From: Antoine Bluchet Date: Fri, 17 Oct 2025 12:30:01 +0200 Subject: [PATCH] Missing Mcp-Protocol-Version to access control --- src/Server/Transport/StreamableHttpTransport.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Server/Transport/StreamableHttpTransport.php b/src/Server/Transport/StreamableHttpTransport.php index 070657de..f4952952 100644 --- a/src/Server/Transport/StreamableHttpTransport.php +++ b/src/Server/Transport/StreamableHttpTransport.php @@ -44,7 +44,7 @@ class StreamableHttpTransport implements TransportInterface private array $corsHeaders = [ 'Access-Control-Allow-Origin' => '*', 'Access-Control-Allow-Methods' => 'GET, POST, DELETE, OPTIONS', - 'Access-Control-Allow-Headers' => 'Content-Type, Mcp-Session-Id, Last-Event-ID, Authorization, Accept', + 'Access-Control-Allow-Headers' => 'Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID, Authorization, Accept', ]; public function __construct(