Skip to content

Is direct browser access to Remote GitHub MCP Server officially supported? Behaviour has changed recently #2342

Description

@insin

Describe the bug

I was previously able to sucessfully connect to the Remote GitHub MCP Server from a private browser client based on v1.x of the MCP TypeScript SDK.

When I picked this up again recently, connection attempts were getting explicitly rejected with a 403.

Affected version

Unknown.

Steps to reproduce the behavior

Try to connect to https://api.githubcopilot.com/mcp/ with a browser-based MCP client using a PAT for authorization.

Expected vs actual behavior

Expected:

Successful connection?

Actual (as of late):

HTTP/1.1 403 Forbidden
Server: github-mcp-server-remote
cross-origin request detected from Sec-Fetch-Site header

Logs

N/A

Activity

  1. SamMorrowDrums commented on Apr 18, 2026

    @SamMorrowDrums
    Collaborator

    Thanks for reporting, this sounds like a regression, we should support cross origin requests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions