diff --git a/README.md b/README.md
index a569d2d..b515490 100644
--- a/README.md
+++ b/README.md
@@ -28,8 +28,8 @@ export MCP_HOST=127.0.0.1
 export MCP_PORT=8150
 export LIGHTRAG_BASE_URL=http://127.0.0.1:9621
 export MCP_DISABLE_DNS_REBINDING=true
-export MCP_ALLOWED_HOSTS="192.168.50.185:*,192.168.50.151:*"
-export MCP_ALLOWED_ORIGINS="http://192.168.50.185:*,http://192.168.50.151:*"
+export MCP_ALLOWED_HOSTS='["192.168.50.185:*","192.168.50.151:*"]'
+export MCP_ALLOWED_ORIGINS='["http://192.168.50.185:*","http://192.168.50.151:*"]'
 lightrag-mcp
 
 # Smoke test (health + optional retrieval)
diff --git a/docker-compose.yml b/docker-compose.yml
index 8a18e85..f76c690 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,8 +8,8 @@ services:
       MCP_HOST: 0.0.0.0
       MCP_PORT: 8150
       MCP_DISABLE_DNS_REBINDING: "true"
-      MCP_ALLOWED_HOSTS: "192.168.50.185:*,192.168.50.151:*"
-      MCP_ALLOWED_ORIGINS: "http://192.168.50.185:*,http://192.168.50.151:*"
+      MCP_ALLOWED_HOSTS: '["192.168.50.185:*","192.168.50.151:*"]'
+      MCP_ALLOWED_ORIGINS: '["http://192.168.50.185:*","http://192.168.50.151:*"]'
       LIGHTRAG_BASE_URL: http://host.docker.internal:9621
     ports:
       - "8150:8150"