examples: safer local defaults (localhost bind + loopback CORS)#1494

Open

TheodorNEngoy wants to merge 6 commits intomodelcontextprotocol:mainfrom

TheodorNEngoy:codex/examples-bind-localhost

Commits on Feb 7, 2026

examples: bind local servers to localhost by default

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
examples: avoid shell exec when opening browser

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
examples: restrict default CORS to localhost

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
examples: add explicit JSON body size limit

Theodor N. Engøy
authored and
Theodor N. Engøy
committed

Commits on Feb 8, 2026

examples: restrict demo CORS to loopback

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
docs: mention MCP_CORS_ORIGIN_REGEX in examples

Theodor N. Engøy
authored and
Theodor N. Engøy
committed