set-header in MCP server policy not available in API

[pferrot]

• I have a REST API exposed as MCP server, following the documentation here
• REST API has validate-jwt policy
• MCP server also has validate-jwt policy
• Problem: I cannot get the Authorizazion header to be forwarded from the MCP server to the API, even though I followed the instructions and added the necessary set-header policy as per the documentation here
  • I even tried to set hardcoded headers with various names (other than Authorization) in the MCP server policy: they are never available in the API

Can you please suggest how to set headers in the MCP server policy so they are available in API policy when using the "Expose REST API as an MCP server" feature?

Thanks in advance!