diff --git a/internal/server/server.go b/internal/server/server.go
index c9e24a7..275a2f7 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -67,11 +67,14 @@ func New(opts Options) (*Server, error) {
 		RequireBearer: opts.RequireBearer,
 	}
 	mcpServer := tools.NewServer(deps)
+	// Behind Caddy (or any reverse proxy) the bind is loopback while Host is
+	// the public name (mcp.verae.ai). Disable the SDK's localhost Host check.
 	stream := mcp.NewStreamableHTTPHandler(func(*http.Request) *mcp.Server {
 		return mcpServer
 	}, &mcp.StreamableHTTPOptions{
-		JSONResponse: opts.JSONResponse,
-		Stateless:    opts.Stateless,
+		JSONResponse:               opts.JSONResponse,
+		Stateless:                  opts.Stateless,
+		DisableLocalhostProtection: true,
 	})
 
 	mux := http.NewServeMux()