- restrict endpoint to spec-mandated HTTP methods only - POST: JSON-RPC messages, responds with application/json or SSE - GET: opens persistent SSE stream for server-to-client push - DELETE: optional client-initiated session termination via Mcp-Session-Id