()
| 70 | * the envelope answers OPTIONS for those paths, not only `/mcp`. |
| 71 | */ |
| 72 | const corsPreflightResponse = (): Response => |
| 73 | new Response(null, { |
| 74 | status: 204, |
| 75 | headers: { |
| 76 | "access-control-allow-origin": "*", |
| 77 | "access-control-allow-methods": "GET, POST, DELETE, OPTIONS", |
| 78 | "access-control-allow-headers": |
| 79 | "content-type, authorization, mcp-session-id, accept, mcp-protocol-version", |
| 80 | "access-control-expose-headers": "mcp-session-id, WWW-Authenticate", |
| 81 | }, |
| 82 | }); |
| 83 | |
| 84 | /** |
| 85 | * The canonical JSON-RPC error `Response` builder for every MCP serving site. |
no outgoing calls
no test coverage detected