Streamable HTTP 移行

ワークフロー中級

エンドポイント、セッションヘッダー、Origin検証、再接続挙動を確認して最新仕様へ移行します。

トリガー/mcp-transport-migrate

使用頻度one-time

Backend Developerなら？ Run /mcp-transport-migrate to get a step-by-step migration plan for your SSE endpoints

DevOps Engineerなら？ Validate transport compliance after infrastructure changes

Streamable HTTPMCP移行SSE

動作フロー

/mcp-transport-migrate [server-dir] run

↓

Phase 1: analyze current transport

endpoint-scan

Map existing HTTP+SSE endpoints

session-headers

Check Mcp-Session-Id handling

origin-check

Validate Origin header verification

reconnect

Audit reconnection behavior

↓

Generate migration diff + rollback plan

↓

✓ Streamable HTTP compliant server + test results

スキルコード

# Streamable HTTP Migrator Skill
## Trigger: /mcp-transport-migrate [server-directory]

When invoked:

1. Scan current transport implementation:
 - Identify HTTP+SSE endpoint patterns
 - Map event stream connections
 - Check session management approach
 - Document current reconnection logic

2. Generate migration plan:

### Endpoint Changes
| Before (HTTP+SSE) | After (Streamable HTTP) |
|-------------------|------------------------|
| POST /message + GET /sse | POST /mcp (single endpoint) |
| SSE event stream | Response body streaming |
| Custom session cookies | Mcp-Session-Id header |

### Required Code Changes
```typescript
// Before: separate SSE endpoint
app.get('/sse', (req, res) => {
  res.setHeader('Content-Type', 'text/event-stream');
  // ... SSE logic
});

// After: single Streamable HTTP endpoint
app.post('/mcp', (req, res) => {
  const sessionId = req.headers['mcp-session-id'];
  // Validate Origin header
  if (!isValidOrigin(req.headers.origin)) {
    return res.status(403).json({ error: 'Invalid origin' });
  }
  // Stream response using chunked transfer
  res.setHeader('Content-Type', 'application/json');
  // ... handle request with optional streaming
});
```

3. Security checklist:
 - [ ] Origin header validation on all requests
 - [ ] Mcp-Session-Id header generation and validation
 - [ ] DNS rebinding protection
 - [ ] Proper CORS configuration
 - [ ] Session cleanup on DELETE /mcp

4. Output: migration diff + rollback script + test suite

コピーしてCLAUDE.mdに貼り付ければ、すぐに使えます。