mcp-proxy 6.4.0 → 6.4.1

package/jsr.json

@@ -3,5 +3,5 @@
   "include": ["src/index.ts", "src/bin/mcp-proxy.ts"],
   "license": "MIT",
   "name": "@punkpeye/mcp-proxy",
-  "version": "6.4.0"
+  "version": "6.4.1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-proxy",
-  "version": "6.4.0",
+  "version": "6.4.1",
   "main": "dist/index.mjs",
   "scripts": {
     "build": "tsdown",

package/src/startHTTPServer.test.ts

@@ -2047,7 +2047,7 @@ it("uses default CORS settings when cors: true", async () => {
   expect(response.status).toBe(204);
   expect(response.headers.get("Access-Control-Allow-Origin")).toBe("*");
   expect(response.headers.get("Access-Control-Allow-Headers")).toBe(
-    "Content-Type, Authorization, Accept, Mcp-Session-Id, Last-Event-Id",
+    "Content-Type, Authorization, Accept, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-Id",
   );
   expect(response.headers.get("Access-Control-Allow-Credentials")).toBe("true");
 

package/src/startHTTPServer.ts

@@ -219,7 +219,7 @@ const applyCorsHeaders = (
   // Default CORS configuration for backward compatibility
   const defaultCorsOptions: CorsOptions = {
     allowedHeaders:
-      "Content-Type, Authorization, Accept, Mcp-Session-Id, Last-Event-Id",
+      "Content-Type, Authorization, Accept, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-Id",
     credentials: true,
     exposedHeaders: ["Mcp-Session-Id"],
     methods: ["GET", "POST", "OPTIONS"],
@@ -348,9 +348,12 @@ const handleStreamRequest = async <T extends ServerLike>({
   ) {
     let body: unknown;
     try {
-      const sessionId = Array.isArray(req.headers["mcp-session-id"])
-        ? req.headers["mcp-session-id"][0]
-        : req.headers["mcp-session-id"];
+      // In stateless mode, ignore session ID header entirely (like Python MCP SDK)
+      const sessionId = stateless
+        ? undefined
+        : (Array.isArray(req.headers["mcp-session-id"])
+            ? req.headers["mcp-session-id"][0]
+            : req.headers["mcp-session-id"]);
 
       let transport: StreamableHTTPServerTransport;