Running client scenario 'http-header-validation' against server: http://127.0.0.1:3954/mcp
Checks:
2026-07-29T03:32:11.996Z [sep-2243-server-reject-invalid-headers         ] SUCCESS Server rejects requests where Mcp-Method header does not match body method
2026-07-29T03:32:11.996Z [sep-2243-server-reject-error-code              ] SUCCESS Server rejects requests where Mcp-Method header does not match body method — uses JSON-RPC error code -32020 (HeaderMismatch)
2026-07-29T03:32:11.998Z [sep-2243-server-reject-invalid-headers         ] SUCCESS Server rejects requests with missing Mcp-Method header
2026-07-29T03:32:11.998Z [sep-2243-server-reject-error-code              ] SUCCESS Server rejects requests with missing Mcp-Method header — uses JSON-RPC error code -32020 (HeaderMismatch)
2026-07-29T03:32:11.999Z [sep-2243-server-reject-invalid-headers         ] SUCCESS Server rejects tools/call where Mcp-Name does not match body params.name
2026-07-29T03:32:11.999Z [sep-2243-server-reject-error-code              ] SUCCESS Server rejects tools/call where Mcp-Name does not match body params.name — uses JSON-RPC error code -32020 (HeaderMismatch)
2026-07-29T03:32:12.000Z [sep-2243-server-accepts-whitespace-header-value] SUCCESS Server MUST accept leading/trailing whitespace in Mcp-Name value (RFC 9110 §5.5: field parsing MUST exclude OWS before evaluating)
2026-07-29T03:32:12.000Z [sep-2243-server-reject-invalid-headers         ] SUCCESS Server MUST reject tools/call with missing Mcp-Name header when body has params.name
2026-07-29T03:32:12.000Z [sep-2243-server-reject-error-code              ] SUCCESS Server MUST reject tools/call with missing Mcp-Name header when body has params.name — uses JSON-RPC error code -32020 (HeaderMismatch)
2026-07-29T03:32:12.000Z [sep-2243-header-name-case-insensitive          ] SUCCESS Server MUST accept lowercase header name (mcp-method)
2026-07-29T03:32:12.001Z [sep-2243-header-name-case-insensitive          ] SUCCESS Server MUST accept uppercase header name (MCP-METHOD)
2026-07-29T03:32:12.001Z [sep-2243-server-reject-invalid-headers         ] SUCCESS Server MUST reject uppercase method value (TOOLS/LIST) since values are case-sensitive
2026-07-29T03:32:12.001Z [sep-2243-server-reject-error-code              ] SUCCESS Server MUST reject uppercase method value (TOOLS/LIST) since values are case-sensitive — uses JSON-RPC error code -32020 (HeaderMismatch)

Test Results:
Passed: 13/13, 0 failed, 0 warnings
