modelcontextprotocol/go-sdk
Watch
1
0
Fork
You've already forked go-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

mcp: remove default cross origin protection (#906)

Browse source 
Fixes #902
This commit is contained in:
Maciej Kisiel 2026-04-24 11:35:22 +02:00 • committed by GitHub
commit 41e1f941bb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 41 additions and 118 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/rough_edges.md
View file

@ -59,3 +59,7 @@ v2.
wrapper) we need to first unmarshal into a `map[string]any` in order to do
server-side validation of required fields. CallToolParams could have just had
a map[string]any.
- `StreamableHTTPOptions.CrossOriginProtection` should not have been part of
the SDK API. Cross-origin protection is a general HTTP concern, not specific
to MCP, and can be applied as standard HTTP middleware.