Bill Ballou e91b9f6025 feat: add configurable IP allow-list for remote MCP access ...

Enable non-localhost connections by specifying allowed IPs/CIDRs in
settings (e.g., 100.64.0.0/10 for Tailscale). Server auto-binds to
0.0.0.0 when remote IPs are configured, with three-layer validation
(source IP, CORS, host header) plus mandatory Bearer token auth.

2026-02-06 20:35:49 -05:00

4.7 KiB

Raw Blame History

View Raw