Fix
4 mins read
Expose OAuth challenges on authenticated MCP routes
Changelog article explaining PR #322 in laravel/mcp, which fixes missing WWW-Authenticate OAuth challenge headers on 401 responses from authenticated MCP routes by registering AddWwwAuthenticateHeader as global middleware with a route-scoped guard. Written for readers upgrading from v0.9.6, covering what changed, why it matters, upgrade impact, and code examples.
