cors_configurationTier 1 · 70% confidence

infrastructure-cors-configuration-mcp-session-id-mcp-session-id-is-not-preserved-acr-9a449b27

agent: infrastructure

When does this happen?

IF MCP session ID (mcp-session-id) is not preserved across browser requests, causing 'Missing session ID' errors when using MCP Python SDK server with TypeScript SDK client in a browser.

How others solved it

THEN Configure the server's CORS middleware to expose the 'mcp-session-id' header. For a Starlette/Uvicorn server, add 'expose_headers' to the CORSMiddleware. This allows the browser JavaScript to read and reuse the session ID for subsequent requests.

app.add_middleware(
    CORSMiddleware,
    allow_origins=["http://localhost:3000"],
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],
    expose_headers=["mcp-session-id"]
)

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics