MCP Streamable HTTP transport

Changed on

Model Context Protocol (MCP) Streamable HTTP endpoint served by the Donut backend. Clients negotiate MCP over JSON-RPC with a Donut personal bearer token. Tool schemas are defined by the MCP protocol, not this OpenAPI document. Requests without a current valid token receive 401 without a sign-in redirect. When an Origin header is supplied, invalid origins are refused with 403.

post/api/mcp

Request

  • Base URL
    (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /api/mcp
  • Auth
    HTTP bearer

Headers

Acceptunknown required

Must include both application/json and text/event-stream

Originunknown

Optional. When present, validated per MCP HTTP transport rules; invalid values yield 403.

Response

JSON-RPC response

unknown required

Changes