modelcontextprotocol/ext-apps
Watch
1
0
Fork
You've already forked ext-apps
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ext-apps/src/server
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Jonathan Hefner 13b6d06399
 Add CSP and CORS section to patterns docs 
Adds a new section to the patterns guide explaining how to configure
Content Security Policy and CORS for MCP Apps that make network requests:

- CSP via `_meta.ui.csp` controls browser-side permissions (`connectDomains`,
  `resourceDomains`)
- CORS via `_meta.ui.domain` provides a stable origin for API servers to
  allowlist

Includes a type-checked example showing `computeAppDomainForClaude()` helper
that hashes an MCP server URL to create a stable `*.claudemcpcontent.com`
subdomain. Also adds `@see` links to `McpUiResourceMeta` and `McpUiResourceCsp`
in `registerAppResource` JSDoc.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-30 14:33:57 -06:00
..
index.examples.ts Add CSP and CORS section to patterns docs 2026-01-30 14:33:57 -06:00
index.test.ts feat(server): add getUiCapability helper for capability negotiation (#313) 2026-01-23 16:26:49 +00:00
index.ts Add CSP and CORS section to patterns docs 2026-01-30 14:33:57 -06:00