Updates MCP

Author: shanerbaner82

app/Http/Middleware/VerifyCsrfToken.php

@@ -14,6 +14,5 @@ class VerifyCsrfToken extends Middleware
     protected $except = [
         'stripe/webhook',
         'opencollective/contribution',
-        'mcp/*',
     ];
 }

routes/api.php

@@ -2,6 +2,7 @@
 
 use App\Http\Controllers\Api\LicenseController;
 use App\Http\Controllers\Api\TemporaryLinkController;
+use App\Http\Controllers\McpController;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Route;
 
@@ -16,6 +17,19 @@
 |
 */
 
+// MCP Server routes (no session/cookies - fixes CSRF 419 errors)
+Route::prefix('mcp')->group(function () {
+    Route::get('sse', [McpController::class, 'sse'])->name('mcp.sse');
+    Route::post('message', [McpController::class, 'message'])->name('mcp.message');
+    Route::get('health', [McpController::class, 'health'])->name('mcp.health');
+
+    // REST API endpoints
+    Route::get('search', [McpController::class, 'searchApi'])->name('mcp.api.search');
+    Route::get('page/{platform}/{version}/{section}/{slug}', [McpController::class, 'pageApi'])->name('mcp.api.page');
+    Route::get('apis/{platform}/{version}', [McpController::class, 'apisApi'])->name('mcp.api.apis');
+    Route::get('navigation/{platform}/{version}', [McpController::class, 'navigationApi'])->name('mcp.api.navigation');
+});
+
 Route::middleware('auth.api_key')->group(function () {
     Route::post('/licenses', [LicenseController::class, 'store']);
     Route::get('/licenses/{key}', [LicenseController::class, 'show']);

routes/web.php

@@ -40,19 +40,6 @@
 // OpenCollective donation claim route
 Route::get('opencollective/claim', App\Livewire\ClaimDonationLicense::class)->name('opencollective.claim');
 
-// MCP Server routes
-Route::prefix('mcp')->group(function () {
-    Route::get('sse', [App\Http\Controllers\McpController::class, 'sse'])->name('mcp.sse');
-    Route::post('message', [App\Http\Controllers\McpController::class, 'message'])->name('mcp.message');
-    Route::get('health', [App\Http\Controllers\McpController::class, 'health'])->name('mcp.health');
-
-    // REST API endpoints
-    Route::get('api/search', [App\Http\Controllers\McpController::class, 'searchApi'])->name('mcp.api.search');
-    Route::get('api/page/{platform}/{version}/{section}/{slug}', [App\Http\Controllers\McpController::class, 'pageApi'])->name('mcp.api.page');
-    Route::get('api/apis/{platform}/{version}', [App\Http\Controllers\McpController::class, 'apisApi'])->name('mcp.api.apis');
-    Route::get('api/navigation/{platform}/{version}', [App\Http\Controllers\McpController::class, 'navigationApi'])->name('mcp.api.navigation');
-});
-
 Route::view('/', 'welcome')->name('welcome');
 Route::view('pricing', 'pricing')->name('pricing');
 Route::view('alt-pricing', 'alt-pricing')->name('alt-pricing')->middleware('signed');