# `POST /mcp`

Protected. Requires a valid session cookie (`credentials: 'include'`).

Model Context Protocol (MCP) Streamable HTTP endpoint

Handles MCP JSON-RPC protocol requests and streamable sessions. Protected by Bearer token authorization.

## Response `200`

MCP JSON-RPC response

## Errors

| Status | Description |
|--------|-------------|
| 401 | Missing or invalid authorization token |

---

_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._