fix(mcp): preserve repeated HTTP host allowlists (#8164)

This commit is contained in:
ShuaixinHuang authored and GitHub committed 2026-10-31 03:13:07 +08:00
1 parent 47fa6ab379
commit d48e472fa6
4 files changed
+148 -4

No files matched your search

+7 -1
View File
@@ -853,7 +853,13 @@ rea mcp --http --port 8765
`--host` and `--port` default to `MCP_HOST` and `MCP_PORT` from the environment,
then to `127.0.0.1` and an ephemeral port. A bind outside loopback requires
`MCP_ALLOWED_HOSTS` or `--allowed-hosts`, a comma-separated list of client host
names or IP addresses without URLs or ports. For example:
names or IP addresses without URLs or ports.
Repeat `--allowed-hosts` to append names, or put multiple names in one
comma-separated value. All occurrences are validated together and deduplicated
after hostname normalization; the explicit list replaces `MCP_ALLOWED_HOSTS`.
For example:
```sh
rea mcp --http --host 0.0.0.0 --allowed-hosts 127.0.0.1,rea.lan