By default, the MCP SDK has a [`DnsRebindingProtectionMiddleware`](https://github.com/modelcontextprotocol/php-sdk/blob/ca849aa75b9b46f47b39077eb8549406c192874b/docs/transports.md#dns-rebinding-protection) rejecting all external requests (only localhost allowed). It would be nice to be able to configure the `allowedHosts` so we can easily create public MCP servers.
By default, the MCP SDK has a
DnsRebindingProtectionMiddlewarerejecting all external requests (only localhost allowed).It would be nice to be able to configure the
allowedHostsso we can easily create public MCP servers.