Self hosted mcp help

{
    "message": "CSRF token mismatch."
}

$ curl http://localhost:8080/mcp   -X POST   -H "Content-Type: application/json"   -H "Accept: application/json, text/event-stream"   -H "MCP-Protocol-Version: 2025-06-18"   -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "initialize",
    "params": {
      "protocolVersion": "2025-06-18",
      "capabilities": {
        "elicitation": {}
      },
      "clientInfo": {
  }'} } "version": "1.0.0"ent",
{
    "message": "CSRF token mismatch."
}

  - name: mcp
    _comment: 'MCP: /mcp -> http://supabase-studio:3000/api/mcp (local access)'
    url: http://supabase-studio:3000/api/mcp
    routes:
      - name: mcp
        strip_path: true
        paths:
          - /mcp
    plugins:
      - name: cors
        config:
          origins:
            - "*"
          methods:
            - GET
            - POST
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Content-Length
            - Content-MD5
            - Content-Type
            - Date
            - X-Auth-Token
            - MCP-Protocol-Version
          exposed_headers:
            - X-Auth-Token
          credentials: true
          max_age: 3600
      - name: ip-restriction
        config:
          allow:
            - 127.0.0.1
            - ::1
            - 10.0.2.1
            - 172.18.0.1
          deny: []

- 'KONG_PLUGINS=request-transformer,cors,key-auth,acl,basic-auth,ip-restriction'