header not work

[kenneth-bro]

App Version

3.12.2

API Provider

OpenAI

Model Used

deepseek-chat

Actual vs. Expected Behavior

mcp_setting.json config headers not work.

Detailed Steps to Reproduce

1. mcp sse add key auth
2. config headers

Relevant API Request Output

Additional Context

No response

[dosubot]

The issue you're experiencing with headers not working in the mcp_setting.json configuration might be related to the use of Server-Sent Events (SSE) protocol, which does not natively support custom headers in JavaScript's EventSource implementation. This can lead to missing authorization headers and result in a 401 error.

To resolve this, you can use the EventSource polyfill from Yaffle's EventSource, which adds support for custom headers in SSE connections. This should allow your authorization headers to be included properly in the requests ^[1].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[hannesrudolph]

Can you please provide more thorough repro steps?

[wanghsinche]

same to me,

    "finance-tools-mcp": {
      "url": "http://localhost:3001/sse",
      "headers":{
        "authorization": "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9"
      },
      "alwaysAllow": [
        "get_current_fng_tool",
        "get_price_history",
        "get_institutional_holders",
  ]

}

the request headers i got

[1] {
[1]   host: 'localhost:3001',
[1]   connection: 'keep-alive',
[1]   accept: 'text/event-stream',
[1]   'accept-language': '*',
[1]   'sec-fetch-mode': 'cors',
[1]   'user-agent': 'node',
[1]   pragma: 'no-cache',
[1]   'cache-control': 'no-cache',
[1]   'accept-encoding': 'gzip, deflate'
[1] }

no authorization

[wanghsinche]

modelcontextprotocol/typescript-sdk#436

The bug is caused by it.