From 4b5ea11ed36d90123790592be35d58acbfe19e71 Mon Sep 17 00:00:00 2001 From: Johannes Wachter Date: Mon, 31 Aug 2026 12:16:28 +0200 Subject: [PATCH] Update sulu/mcp-bundle recipe for symfony/mcp-bundle 0.13 (#2039) symfony/mcp-bundle 0.13 replaced the single implicit server with named servers under `mcp.servers`. sulu/mcp-bundle prepends one called `sulu`, so the `allowed_hosts` this recipe writes moves under `mcp.servers.sulu.http`. --- .../1.0/config/packages/sulu_mcp.yaml | 23 +++++++++++-------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/sulu/mcp-bundle/1.0/config/packages/sulu_mcp.yaml b/sulu/mcp-bundle/1.0/config/packages/sulu_mcp.yaml index 69c8781b..a08cc8fc 100644 --- a/sulu/mcp-bundle/1.0/config/packages/sulu_mcp.yaml +++ b/sulu/mcp-bundle/1.0/config/packages/sulu_mcp.yaml @@ -8,16 +8,19 @@ sulu_mcp: # ownership of a file that is not ours. mcp: - http: - # DNS rebinding protection. Left unset it accepts localhost only, so a server - # reachable under its own domain answers every request with "403 Forbidden: - # Invalid Host header." after the OAuth handshake already succeeded, and without - # writing anything to the log. Hosts carry no port. - allowed_hosts: - - '%env(key:host:url:SULU_MCP_SERVER_URL)%' - - localhost - - 127.0.0.1 - - '[::1]' + servers: + # The server SuluMcpBundle prepends; its remaining options are set there. + sulu: + http: + # DNS rebinding protection. Left unset it accepts localhost only, so a server + # reachable under its own domain answers every request with "403 Forbidden: + # Invalid Host header." after the OAuth handshake already succeeded, and without + # writing anything to the log. Hosts carry no port. + allowed_hosts: + - '%env(key:host:url:SULU_MCP_SERVER_URL)%' + - localhost + - 127.0.0.1 + - '[::1]' league_oauth2_server: scopes: