Correct CORS headers required for connecting from browser based MCP Clients

This commit is contained in:
Nilanjan De 2025-07-21 14:21:54 +04:00 committed by GitHub
parent fe8f6e1e04
commit 31e659d63f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -213,7 +213,8 @@ async function main() {
// Set CORS headers for all responses // Set CORS headers for all responses
res.setHeader("Access-Control-Allow-Origin", "*"); res.setHeader("Access-Control-Allow-Origin", "*");
res.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS,DELETE"); res.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS,DELETE");
res.setHeader("Access-Control-Allow-Headers", "Content-Type, MCP-Session-Id, mcp-session-id"); res.setHeader("Access-Control-Allow-Headers", "Content-Type, mcp-session-id");
res.setHeader("Access-Control-Expose-Headers", "MCP-Session-Id");
// Handle preflight OPTIONS requests // Handle preflight OPTIONS requests
if (req.method === "OPTIONS") { if (req.method === "OPTIONS") {