MCP TypeScript SDK (V2) / @modelcontextprotocol/hono / middleware/originValidation

middleware/originValidation

Functions

localhostOriginValidation()

localhostOriginValidation(): MiddlewareHandler

Defined in: middleware/originValidation.ts:36

Convenience middleware for localhost Origin validation. Allows only origins whose hostname is localhost, 127.0.0.1, or [::1] (IPv6 localhost).

Returns

MiddlewareHandler

---

originValidation()

originValidation(allowedOriginHostnames): MiddlewareHandler

Defined in: middleware/originValidation.ts:12

Hono middleware for Origin header validation. Validates the Origin header hostname (port-agnostic) against an allowed list.

Requests without an Origin header pass (non-browser MCP clients do not send one); a present value that is not allowed, or that cannot be parsed, is rejected with 403.

Parameters

allowedOriginHostnames

string[]

Returns

MiddlewareHandler