Create Flex endpoint

index.json

@@ -12,9 +12,9 @@
     "_links": {
         "repository": "github.com/symfony/recipes-contrib",
         "origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
-        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2034/{package_dotted}.{version}.json",
+        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2039/{package_dotted}.{version}.json",
         "recipe_template_relative": "{package_dotted}.{version}.json",
-        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2034/archived/{package_dotted}/{ref}.json",
+        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2039/archived/{package_dotted}/{ref}.json",
         "archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
     }
 }

sulu.mcp-bundle.1.0.json

@@ -87,16 +87,19 @@
                         "# ownership of a file that is not ours.",
                         "",
                         "mcp:",
-                        "    http:",
-                        "        # DNS rebinding protection. Left unset it accepts localhost only, so a server",
-                        "        # reachable under its own domain answers every request with \"403 Forbidden:",
-                        "        # Invalid Host header.\" after the OAuth handshake already succeeded, and without",
-                        "        # writing anything to the log. Hosts carry no port.",
-                        "        allowed_hosts:",
-                        "            - '%env(key:host:url:SULU_MCP_SERVER_URL)%'",
-                        "            - localhost",
-                        "            - 127.0.0.1",
-                        "            - '[::1]'",
+                        "    servers:",
+                        "        # The server SuluMcpBundle prepends; its remaining options are set there.",
+                        "        sulu:",
+                        "            http:",
+                        "                # DNS rebinding protection. Left unset it accepts localhost only, so a server",
+                        "                # reachable under its own domain answers every request with \"403 Forbidden:",
+                        "                # Invalid Host header.\" after the OAuth handshake already succeeded, and without",
+                        "                # writing anything to the log. Hosts carry no port.",
+                        "                allowed_hosts:",
+                        "                    - '%env(key:host:url:SULU_MCP_SERVER_URL)%'",
+                        "                    - localhost",
+                        "                    - 127.0.0.1",
+                        "                    - '[::1]'",
                         "",
                         "league_oauth2_server:",
                         "    scopes:",
@@ -131,7 +134,7 @@
                     "executable": false
                 }
             },
-            "ref": "82ffa93812d4dff9e9d5673751749ddc8f65b46c"
+            "ref": "5c8da8c17e2a8976aac6614c4fbdbc3ce841eb06"
         }
     }
 }