Question about access to headers inside a tool

[esnible]

Pre-submission Checklist

• I have verified that this discussion would not be more appropriate as an issue in a specific repository
• I have searched existing discussions to avoid duplicates

Discussion Topic

I would like some of my tools built using https://github.com/modelcontextprotocol/go-sdk to require an API key, but others would need no security.

I set up my HTTP server to put the Authorization header into the request Context.
I noticed my tool functions receive the Context from the initialize method, not the Context from the tools/call method.

Is that behavior incorrect or is it the behavior what is expected by the MCP spec?

I realize that authorization checking is a separate concern from the tool implementation. I did not see a way to add interceptors to specific tools in modelcontextprotocol/go-sdk .