mcp-header-validation-mcp-server-processes-a-request-where-mcp-method-or-2f4283bc

THEN Implement server-side validation that rejects requests if the header values do not match the corresponding fields in the request body. Use HTTP 400 Bad Request with an error response. This prevents routing mismatches and potential security vulnerabilities.

HTTP/1.1 400 Bad Request
Content-Type: application/json

{"jsonrpc":"2.0","error":{"code":-32600,"message":"Header Mcp-Method does not match body method"},"id":null}