diff --git a/src/http-server.ts b/src/http-server.ts
index 4634173..b43f5fa 100644
--- a/src/http-server.ts
+++ b/src/http-server.ts
@@ -23,6 +23,17 @@ import {
 
 dotenv.config();
 
+/**
+ * MCP tool response format with optional structured content
+ */
+interface MCPToolResponse {
+  content: Array<{
+    type: 'text';
+    text: string;
+  }>;
+  structuredContent?: unknown;
+}
+
 let expressServer: any;
 let authToken: string | null = null;
 
@@ -401,25 +412,43 @@ export async function startFixedHTTPServer() {
               // Delegate to the MCP server
               const toolName = jsonRpcRequest.params?.name;
               const toolArgs = jsonRpcRequest.params?.arguments || {};
-              
+
               try {
                 const result = await mcpServer.executeTool(toolName, toolArgs);
-                
+
+                // Convert result to JSON text for content field
+                let responseText = JSON.stringify(result, null, 2);
+
                 // Build MCP-compliant response with structuredContent for validation tools
-                const mcpResult: any = {
+                const mcpResult: MCPToolResponse = {
                   content: [
                     {
                       type: 'text',
-                      text: JSON.stringify(result, null, 2)
+                      text: responseText
                     }
                   ]
                 };
-                
+
                 // Add structuredContent for validation tools (they have outputSchema)
+                // Apply 1MB safety limit to prevent memory issues (matches STDIO server behavior)
                 if (toolName.startsWith('validate_')) {
-                  mcpResult.structuredContent = result;
+                  const resultSize = responseText.length;
+
+                  if (resultSize > 1000000) {
+                    // Response is too large - truncate and warn
+                    logger.warn(
+                      `Validation tool ${toolName} response is very large (${resultSize} chars). ` +
+                      `Truncating for HTTP transport safety.`
+                    );
+                    mcpResult.content[0].text = responseText.substring(0, 999000) +
+                      '\n\n[Response truncated due to size limits]';
+                    // Don't include structuredContent for truncated responses
+                  } else {
+                    // Normal case - include structured content for MCP protocol compliance
+                    mcpResult.structuredContent = result;
+                  }
                 }
-                
+
                 response = {
                   jsonrpc: '2.0',
                   result: mcpResult,