diff --git a/src/mcp/requirements.txt b/src/mcp/requirements.txt
index 71f70c6d..ad8d30c0 100644
--- a/src/mcp/requirements.txt
+++ b/src/mcp/requirements.txt
@@ -1,5 +1,5 @@
 # Core framework
-fastapi>=0.136.1,!=0.136.3,<0.137  # 0.136.3 excluded — OSV MAL-2026-4750 (malicious `fastar` dep in [standard] extra)
+fastapi!=0.136.3,>=0.137.1,<0.138  # 0.136.3 excluded — OSV MAL-2026-4750 (malicious `fastar` dep in [standard] extra)
 sentry-sdk[fastapi]>=2.61.1
 uvicorn[standard]>=0.49.0,<1
 pydantic>=2.13.4,<3