diff --git a/backend/app/mcp_server.py b/backend/app/mcp_server.py
index 2a4552a..eacac22 100644
--- a/backend/app/mcp_server.py
+++ b/backend/app/mcp_server.py
@@ -122,7 +122,9 @@ _STATIC_COMPONENTS = [
 # streamable_http_path="/" so that when mounted at /mcp the endpoint is /mcp/
 # stateless_http=True: each request is independent (no session management)
 # Disable DNS rebinding protection for Docker deployment
-mcp = FastMCP("hms-cms", streamable_http_path="/", stateless_http=True)
+from mcp.server.transport_security import TransportSecuritySettings
+
+mcp = FastMCP("hms-cms", streamable_http_path="/", stateless_http=True, transport_security=TransportSecuritySettings(enable_dns_rebinding_protection=False))
 
 # ---------------------------------------------------------------------------#
 # Bearer token authentication wrapper