WhatToChange: recommended-changes/2026-09-21-sample-page/ What-to-Change.md What-to-Change-To.md How-to-implement-the-changes.md What was actually done: - site/index.html calls stamp, verify, or hash_report over Streamable HTTP. - README points at the sample page and https://mcp.georgelambert.org/. What was not done: - The public host does not reverse-proxy the MCP listener. A page on the internet cannot call 127.0.0.1, and the VeraeTime bearer token stays off an open listener.
491 B
491 B
Done and not done
WhatToChange: recommended-changes/2026-09-21-sample-page/
What was actually done:
- site/index.html calls stamp, verify, or hash_report over Streamable HTTP.
- mcp.georgelambert.org serves that page and the HTML/PDF docs (recorded after publish; see the commit body if publish landed in the same change).
What was not done:
- (none) The public page does not open a tunnel to the loopback MCP server. Browsers block that, and the token must stay off the open internet.