From 6883f2fdf93b875186b5a2f416ad010f753de73c Mon Sep 17 00:00:00 2001
From: unknown <ivan@malinov.ski>
Date: Mon, 6 Apr 2026 15:38:52 +0200
Subject: [PATCH] fix(mcp): revert allowedOrigins to avoid SDK compatibility
 issues

---
 server/src/mcp/index.ts | 1 -
 1 file changed, 1 deletion(-)

diff --git a/server/src/mcp/index.ts b/server/src/mcp/index.ts
index 86c8e421..aeffdba4 100644
--- a/server/src/mcp/index.ts
+++ b/server/src/mcp/index.ts
@@ -154,7 +154,6 @@ export async function mcpHandler(req: Request, res: Response): Promise<void> {
 
   const transport = new StreamableHTTPServerTransport({
     sessionIdGenerator: () => randomUUID(),
-    allowedOrigins: ['*'],
     onsessioninitialized: (sid) => {
       sessions.set(sid, { server, transport, userId: user.id, lastActivity: Date.now() });
       console.log(`[MCP] Session ${sid} created for user ${user.id}. Active sessions: ${sessions.size}`);