[docs] Remove config call from app/bootstrap.php

[barryvdh]

I don't think it's safe to call this config() helper inside app/bootstrap.php. It gave me errors at least.

Also, why not add the integrated route to the API middleware by default, instead of web? I think you don't want sessions etc.

[CodeWithKyrian]

Good point on both. Using config() there can be an issue and I'm not sure the providers are booted up to that point. Thanks for flagging that!

As for web vs. api middleware for http_integrated, api middleware definitely makes more sense to avoid web session stuff. The main reason I defaulted to web was for a quick way to grab Laravel's session ID as a default clientId for the SSE connection. It was just a convenience (since if that ID isn't available, it just uses a new UUID).

The next version of the base php-mcp/server package actually overhauls session management completely based on the newer MCP spec(the 2025-03-26 revision), so it won't need Laravel's session for that anymore. Once that's done, I'll fully switch the default middleware for http_integrated to api. That's definitely the cleaner way to go.