InvalidOrigin

Less than 1 minute

Thrown when a request carries an Origin header that is not permitted.

class InvalidOrigin extends \Hazaar\MCP\Exception\ProtocolError

Extends: Hazaar\MCP\Exception\ProtocolError

Origin validation is what stops a malicious web page from driving a locally-bound MCP server via DNS rebinding.

Methods

public __construct(string $origin): void

Parameter	Type	Description
`$origin`	string

Generated by Hazaar API Doc Generator on Sun, 23 Aug 2026 10:49:44 +0000