html-login-wall · Transport & framing
Client reports 'Unexpected token < in JSON' — the body is HTML.
An auth proxy / SSO gateway intercepts the request and returns its login page with HTTP 200.
Exclude the MCP path from the HTML auth redirect; return 401 JSON for unauthenticated API calls.
curl -sS -X POST \
https://chaos-mcp.thomascdnns.com/s/html-login-wall/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2024-11-05",
"capabilities": {},
"clientInfo": {"name": "curl", "version": "1"}
}
}'