René's URL Explorer Experiment


Title: Clarify HTTP 403 status for invalid Origin headers by pja-ant · Pull Request #1439 · modelcontextprotocol/modelcontextprotocol · GitHub

Open Graph Title: Clarify HTTP 403 status for invalid Origin headers by pja-ant · Pull Request #1439 · modelcontextprotocol/modelcontextprotocol

X Title: Clarify HTTP 403 status for invalid Origin headers by pja-ant · Pull Request #1439 · modelcontextprotocol/modelcontextprotocol

Description: Specification and documentation for the Model Context Protocol - Clarify HTTP 403 status for invalid Origin headers by pja-ant · Pull Request #1439 · modelcontextprotocol/modelcontextprotocol

Open Graph Description: Add explicit guidance that servers MUST respond with HTTP 403 Forbidden when the Origin header is present but invalid. This addresses part of issue #1398 regarding inconsistent error responses acro...

X Description: Add explicit guidance that servers MUST respond with HTTP 403 Forbidden when the Origin header is present but invalid. This addresses part of issue #1398 regarding inconsistent error responses acro...

Opengraph URL: https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:862c2f43-4d8e-79e9-c6d4-436c289b5c9f
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id9F90:2C32F8:2BE3C58:39B7BDD:6A5CE8EB
html-safe-nonced32a7e2053cce504d1fb9728e2aecf64a5aeca9a5b8b89040b29feeb08c3a0e9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5RjkwOjJDMzJGODoyQkUzQzU4OjM5QjdCREQ6NkE1Q0U4RUIiLCJ2aXNpdG9yX2lkIjoiODIwNDI2ODAzMTIwOTk1NzYxMiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac9b3fc05726098a53ac3a8fcd87483126d5b00c3779d75dd58b81a0da55d53c4e
hovercard-subject-tagpull_request:2808433365
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/modelcontextprotocol/modelcontextprotocol/1439/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/1ffbe9fb2ad69107edc83d8853bcd7f362f5b9dd15f348be3e2da45421947ed5/modelcontextprotocol/modelcontextprotocol/pull/1439
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/1ffbe9fb2ad69107edc83d8853bcd7f362f5b9dd15f348be3e2da45421947ed5/modelcontextprotocol/modelcontextprotocol/pull/1439
og:image:altAdd explicit guidance that servers MUST respond with HTTP 403 Forbidden when the Origin header is present but invalid. This addresses part of issue #1398 regarding inconsistent error responses acro...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamepja-ant
hostnamegithub.com
expected-hostnamegithub.com
None5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b
turbo-cache-controlno-cache
go-importgithub.com/modelcontextprotocol/modelcontextprotocol git https://github.com/modelcontextprotocol/modelcontextprotocol.git
octolytics-dimension-user_id182288589
octolytics-dimension-user_loginmodelcontextprotocol
octolytics-dimension-repository_id862570523
octolytics-dimension-repository_nwomodelcontextprotocol/modelcontextprotocol
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id862570523
octolytics-dimension-repository_network_root_nwomodelcontextprotocol/modelcontextprotocol
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9c975978430e9ad293956f2bbdaf153b1bd84a99
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F1439
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F1439
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=modelcontextprotocol%2Fmodelcontextprotocol
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
modelcontextprotocol https://github.com/modelcontextprotocol
modelcontextprotocolhttps://github.com/modelcontextprotocol/modelcontextprotocol
Notifications https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Fork 1.7k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Star 8.6k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Code https://github.com/modelcontextprotocol/modelcontextprotocol
Issues 112 https://github.com/modelcontextprotocol/modelcontextprotocol/issues
Pull requests 78 https://github.com/modelcontextprotocol/modelcontextprotocol/pulls
Discussions https://github.com/modelcontextprotocol/modelcontextprotocol/discussions
Actions https://github.com/modelcontextprotocol/modelcontextprotocol/actions
Projects https://github.com/modelcontextprotocol/modelcontextprotocol/projects
Models https://github.com/modelcontextprotocol/modelcontextprotocol/models
Security and quality 0 https://github.com/modelcontextprotocol/modelcontextprotocol/security
Insights https://github.com/modelcontextprotocol/modelcontextprotocol/pulse
Code https://github.com/modelcontextprotocol/modelcontextprotocol
Issues https://github.com/modelcontextprotocol/modelcontextprotocol/issues
Pull requests https://github.com/modelcontextprotocol/modelcontextprotocol/pulls
Discussions https://github.com/modelcontextprotocol/modelcontextprotocol/discussions
Actions https://github.com/modelcontextprotocol/modelcontextprotocol/actions
Projects https://github.com/modelcontextprotocol/modelcontextprotocol/projects
Models https://github.com/modelcontextprotocol/modelcontextprotocol/models
Security and quality https://github.com/modelcontextprotocol/modelcontextprotocol/security
Insights https://github.com/modelcontextprotocol/modelcontextprotocol/pulse
dsp-anthttps://github.com/dsp-ant
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/modelcontextprotocol/tree/main
pja-ant:clarify-403-invalid-originhttps://github.com/pja-ant/modelcontextprotocol/tree/clarify-403-invalid-origin
Conversationhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
Commits3 (3)https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits
Checkshttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/checks
Files changedhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/files
Clarify HTTP 403 status for invalid Origin headershttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#top
dsp-anthttps://github.com/dsp-ant
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/modelcontextprotocol/tree/main
pja-ant:clarify-403-invalid-originhttps://github.com/pja-ant/modelcontextprotocol/tree/clarify-403-invalid-origin
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
Sep 8, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issue-3394409637
#1398https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1398
#1398https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1398
MCP Documentationhttps://modelcontextprotocol.io
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
September 8, 2025 14:12https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#event-19566237453
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
Sep 8, 2025 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-pullrequest-3394491201
Return HTTP 403 for invalid Origin headers modelcontextprotocol/python-sdk#1353 https://github.com/modelcontextprotocol/python-sdk/pull/1353
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
Sep 8, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3266625402
modelcontextprotocol/python-sdk#1353https://github.com/modelcontextprotocol/python-sdk/pull/1353
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/dend
dendhttps://github.com/dend
Sep 9, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3269088094
@pja-anthttps://github.com/pja-ant
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
Sep 9, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3270407506
@pja-anthttps://github.com/pja-ant
@dendhttps://github.com/dend
SEP guidelineshttps://modelcontextprotocol.io/community/sep-guidelines
400https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request
403https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/dsp-ant
dsp-anthttps://github.com/dsp-ant
Sep 19, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3312340908
@localdenhttps://github.com/localden
@pcarletonhttps://github.com/pcarleton
@pja-anthttps://github.com/pja-ant
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
pja-anthttps://github.com/pja-ant
September 19, 2025 15:23https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#commits-pushed-a3eb855
https://github.com/pja-ant
https://github.com/claude
Clarify HTTP 403 status for invalid Origin headershttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/a3eb855da3b6fc773baed8877ac8db01c1065c22
a3eb855https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/a3eb855da3b6fc773baed8877ac8db01c1065c22
modelcontextprotocol#1398https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1398
https://claude.ai/codehttps://claude.ai/code
https://github.com/pja-ant
Apply Prettier formattinghttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/246b7b7ccd704678e7eedc79de62cc11d9b8db03
246b7b7https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/246b7b7ccd704678e7eedc79de62cc11d9b8db03
https://github.com/pcarleton
pcarletonhttps://github.com/pcarleton
Sep 19, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3312406012
@pja-anthttps://github.com/pja-ant
@ochafikhttps://github.com/ochafik
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/pja-ant
Add changelog entryhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/e51a03943d3bffd019df529c2a866eb473967e29
e51a039https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/commits/e51a03943d3bffd019df529c2a866eb473967e29
https://github.com/pja-ant
pja-anthttps://github.com/pja-ant
force-pushedhttps://github.com/modelcontextprotocol/modelcontextprotocol/compare/7dfb0b8cd0af07292cf0bb3cd0e49ebfbad9e197..e51a03943d3bffd019df529c2a866eb473967e29
7dfb0b8https://github.com/modelcontextprotocol/modelcontextprotocol/commit/7dfb0b8cd0af07292cf0bb3cd0e49ebfbad9e197
e51a039https://github.com/modelcontextprotocol/modelcontextprotocol/commit/e51a03943d3bffd019df529c2a866eb473967e29
Compare https://github.com/modelcontextprotocol/modelcontextprotocol/compare/7dfb0b8cd0af07292cf0bb3cd0e49ebfbad9e197..e51a03943d3bffd019df529c2a866eb473967e29
September 19, 2025 14:26https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#event-19800905198
https://github.com/dsp-ant
dsp-anthttps://github.com/dsp-ant
Sep 19, 2025 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#pullrequestreview-3245541194
View reviewed changes https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/files/e51a03943d3bffd019df529c2a866eb473967e29
https://github.com/dsp-ant
dsp-anthttps://github.com/dsp-ant
16eeb7dhttps://github.com/modelcontextprotocol/modelcontextprotocol/commit/16eeb7ddaa7db197341270308c45d8c19ad87ba6
Sep 19, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#event-19802524884
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/jacopoc
jacopochttps://github.com/jacopoc
Nov 22, 2025https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#issuecomment-3566351890
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/Kehrlann
Kehrlannhttps://github.com/Kehrlann
Nov 26, 2025 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-issue-3666763396
Return HTTP 403 when Origin header is invalid modelcontextprotocol/java-sdk#695 https://github.com/modelcontextprotocol/java-sdk/issues/695
https://github.com/jacopoc
jacopochttps://github.com/jacopoc
Dec 1, 2025 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-issue-3624898687
Implement DNS rebinding protection jacopoc/mcp-server-for-apache-ofbiz#31 https://github.com/jacopoc/mcp-server-for-apache-ofbiz/issues/31
https://github.com/Yuan325
Yuan325https://github.com/Yuan325
Jan 13, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-pullrequest-3810894198
chore: update host validation error to 403 googleapis/mcp-toolbox#2306 https://github.com/googleapis/mcp-toolbox/pull/2306
Yuan325https://github.com/Yuan325
Jan 15, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-d00b6fd
https://github.com/Yuan325
chore: update host validation error to 403 (https://github.com/googleapis/mcp-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/googleapis/mcp-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
d00b6fdhttps://github.com/googleapis/mcp-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
github-actionshttps://github.com/apps/github-actions
Jan 15, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-3f6a4ed
https://github.com/Genesis929
deploy: chore: update host validation error to 403 (https://github.com/Genesis929/genai-toolbox/commit/3f6a4edc10b292d5e1a2836ed86a07839ee956d5
googleapis#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/Genesis929/genai-toolbox/commit/3f6a4edc10b292d5e1a2836ed86a07839ee956d5
3f6a4edhttps://github.com/Genesis929/genai-toolbox/commit/3f6a4edc10b292d5e1a2836ed86a07839ee956d5
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
d00b6fdhttps://github.com/Genesis929/genai-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
github-actionshttps://github.com/apps/github-actions
Jan 15, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-0425ade
https://github.com/apps/pull
deploy: chore: update host validation error to 403 (https://github.com/CrazyForks/genai-toolbox/commit/0425ade220a0606bc91f1555271e49017f26f05d
googleapis#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/CrazyForks/genai-toolbox/commit/0425ade220a0606bc91f1555271e49017f26f05d
0425adehttps://github.com/CrazyForks/genai-toolbox/commit/0425ade220a0606bc91f1555271e49017f26f05d
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
d00b6fdhttps://github.com/CrazyForks/genai-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
github-actionshttps://github.com/apps/github-actions
Jan 15, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-2e025b5
https://github.com/apps/pull
deploy: chore: update host validation error to 403 (https://github.com/Jaleel-zhu/genai-toolbox/commit/2e025b5d309ebd5426f387bd67bc26e88d22e7d2
googleapis#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/Jaleel-zhu/genai-toolbox/commit/2e025b5d309ebd5426f387bd67bc26e88d22e7d2
2e025b5https://github.com/Jaleel-zhu/genai-toolbox/commit/2e025b5d309ebd5426f387bd67bc26e88d22e7d2
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
d00b6fdhttps://github.com/Jaleel-zhu/genai-toolbox/commit/d00b6fdf1828b919c47bd8308dc6ba59578f173c
mahlevanshikahttps://github.com/mahlevanshika
Jan 22, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-c619c24
https://github.com/Yuan325
https://github.com/mahlevanshika
chore: update host validation error to 403 (https://github.com/mahlevanshika/genai-toolbox/commit/c619c24e8940658c9c7939097fd94a5f27249973
googleapis#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/mahlevanshika/genai-toolbox/commit/c619c24e8940658c9c7939097fd94a5f27249973
c619c24https://github.com/mahlevanshika/genai-toolbox/commit/c619c24e8940658c9c7939097fd94a5f27249973
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
kshalu-codehttps://github.com/kshalu-code
Feb 4, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-e43f668
https://github.com/Yuan325
https://github.com/kshalu-code
chore: update host validation error to 403 (https://github.com/kshalu-code/genai-toolbox/commit/e43f668981d2f3f2d03b37c89502d1c3dab1ea9a
googleapis#2306https://github.com/googleapis/mcp-toolbox/pull/2306
)https://github.com/kshalu-code/genai-toolbox/commit/e43f668981d2f3f2d03b37c89502d1c3dab1ea9a
e43f668https://github.com/kshalu-code/genai-toolbox/commit/e43f668981d2f3f2d03b37c89502d1c3dab1ea9a
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
https://github.com/yonib05
yonib05https://github.com/yonib05
Feb 10, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-issue-3922247262
[FEATURE] MCP Specification 2026-07-28 adoption (parent tracker) strands-agents/harness-sdk#1659 https://github.com/strands-agents/harness-sdk/issues/1659
NightStack15https://github.com/NightStack15
Mar 20, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-49eb1d7
https://github.com/NightStack15
chore: update host validation error to 403 (#2306)https://github.com/NightStack15/googleapis-_-genai-toolbox/commit/49eb1d7da034b7399bc1dcd2a753c89cb1bc5282
49eb1d7https://github.com/NightStack15/googleapis-_-genai-toolbox/commit/49eb1d7da034b7399bc1dcd2a753c89cb1bc5282
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
http://127.0.0.1:5000http://127.0.0.1:5000
https://github.com/localden
localdenhttps://github.com/localden
Jun 26, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-issue-3363598405
Streamable HTTP: clarification for error cases and application/json responses #1398 https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1398
koichttps://github.com/koic
Jul 7, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439#ref-commit-ba54308
https://github.com/koic
https://github.com/tonghuaroot
Validate Host and Origin Headers to Prevent DNS Rebinding per MCP…https://github.com/modelcontextprotocol/ruby-sdk/commit/ba543083a7594e7892b29464b89091816446ff7a
ba54308https://github.com/modelcontextprotocol/ruby-sdk/commit/ba543083a7594e7892b29464b89091816446ff7a
modelcontextprotocol/modelcontextprotocol#1439https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
GHSA-rjr6-rcgv-9m7mhttps://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-rjr6-rcgv-9m7m
http://example.com`http://example.com`
https://github.co/hiddenchars
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F1439
https://github.com/dsp-ant
dsp-ant https://github.com/dsp-ant
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439/files/e51a03943d3bffd019df529c2a866eb473967e29
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/1439
https://github.com/pja-ant
https://github.com/dend
https://github.com/dsp-ant
https://github.com/pcarleton
https://github.com/jacopoc
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.