diff --git a/Cargo.lock b/Cargo.lock
index a0255b8b..233c240f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -41,7 +41,6 @@ dependencies = [
  "async-trait",
  "axum 0.7.9",
  "futures",
- "http 1.4.0",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
@@ -1078,7 +1077,6 @@ checksum = "edca88bc138befd0323b20752846e6587272d3b03b0343c8ea28a6f819e6e71f"
 dependencies = [
  "async-trait",
  "axum-core 0.4.5",
- "axum-macros",
  "base64 0.22.1",
  "bytes",
  "futures-util",
@@ -1173,17 +1171,6 @@ dependencies = [
  "tower-service",
 ]
 
-[[package]]
-name = "axum-macros"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57d123550fa8d071b7255cb0cc04dc302baa6c8c4a79f55701552684d8399bce"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
 [[package]]
 name = "axum-server"
 version = "0.7.3"
@@ -5205,7 +5192,6 @@ dependencies = [
  "tower 0.5.3",
  "tower-layer",
  "tower-service",
- "tracing",
 ]
 
 [[package]]
@@ -5264,16 +5250,6 @@ dependencies = [
  "tracing-core",
 ]
 
-[[package]]
-name = "tracing-serde"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "704b1aeb7be0d0a84fc9828cae51dab5970fee5088f83d1dd7ee6f6246fc6ff1"
-dependencies = [
- "serde",
- "tracing-core",
-]
-
 [[package]]
 name = "tracing-subscriber"
 version = "0.3.23"
@@ -5284,15 +5260,12 @@ dependencies = [
  "nu-ansi-term",
  "once_cell",
  "regex-automata",
- "serde",
- "serde_json",
  "sharded-slab",
  "smallvec",
  "thread_local",
  "tracing",
  "tracing-core",
  "tracing-log",
- "tracing-serde",
 ]
 
 [[package]]
@@ -5442,7 +5415,6 @@ checksum = "ddd74a9687298c6858e9b88ec8935ec45d22e8fd5e6394fa1bd4e99a87789c76"
 dependencies = [
  "getrandom 0.4.2",
  "js-sys",
- "serde_core",
  "sha1_smol",
  "wasm-bindgen",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 7313b7f5..83b86c71 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,11 +36,15 @@ futures = "0.3"
 tokio-tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
 async-trait = "0.1"
 
-# HTTP server
-axum = { version = "0.7", features = ["macros", "ws", "tracing", "multipart"] }
+# HTTP server. axum's `tracing` feature has no API surface — it gates
+# axum's internal logging of extractor rejections, so a zero-hit grep is
+# its normal appearance. It is also an axum default feature (defaults
+# stay on here), so the explicit entry documents intent rather than
+# being what enables it.
+axum = { version = "0.7", features = ["ws", "tracing", "multipart"] }
 axum-server = { version = "0.7", features = ["tls-rustls"] }
 tower = "0.5"
-tower-http = { version = "0.6", features = ["trace", "cors", "limit", "compression-gzip", "set-header"] }
+tower-http = { version = "0.6", features = ["set-header"] }
 http = "1.2"
 http-body-util = "0.1"
 # Trusted-proxy CIDR matching for real-ip resolution (#492)
@@ -113,12 +117,12 @@ yaml-rust2 = "0.8"
 # Time / IDs
 chrono = { version = "0.4", features = ["serde"] }
 chrono-tz = "0.10"
-uuid = { version = "1.11", features = ["v4", "v5", "serde"] }
+uuid = { version = "1.11", features = ["v4", "v5"] }
 hostname = "0.4"
 
 # Observability
 tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["env-filter", "json", "fmt", "registry"] }
+tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt", "registry"] }
 metrics = "0.24"
 metrics-exporter-prometheus = "0.16"
 
diff --git a/crates/aisix-a2a/Cargo.toml b/crates/aisix-a2a/Cargo.toml
index 1209c99b..fb0c0a2c 100644
--- a/crates/aisix-a2a/Cargo.toml
+++ b/crates/aisix-a2a/Cargo.toml
@@ -22,7 +22,6 @@ serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
-http.workspace = true
 # A2A has no official Rust SDK (the reference SDKs are Python/JS/Java/Go/.NET),
 # so the JSON-RPC 2.0 + agent-card plumbing is hand-rolled directly on the
 # workspace HTTP client rather than pulled from an SDK.