Skip to main content
GET
/
mcp
/
sse
MCP SSE stream
curl --request GET \
  --url https://mcp.echozero.app/mcp/sse \
  --header 'Accept: <accept>' \
  --header 'Authorization: Bearer <token>' \
  --header 'mcp-session-id: <mcp-session-id>'

Authorizations

​
Authorization
string
header
required

User JWT access token issued by POST /api/auth/verify or POST /api/auth/social/verify. Routes that accept both auth modes declare api-key and bearer-jwt security schemes.

Headers

​
mcp-session-id
string
required

Session id returned by POST /mcp after initialize.

​
Accept
string
default:text/event-stream
required
​
x-signature
string

HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Optional -- when omitted, HMAC verification is skipped.

​
x-timestamp
string

Request timestamp in epoch milliseconds. Required when x-signature is provided. Rejected if drift exceeds 5 minutes.

Response

SSE stream