A Website Can Read Your Local MCP Server, and Here's How to Stop ItYou add a local MCP to your app, bind it to 127.0.0.1, and move on. Then a page you open in Safari reads it, lists its tools, and calls them. There are no sket... Dawid Żak•Oct 8, 2026•6 min read