305 pages for sandbox.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Security Best Practices
Model Context Protocol · in the page
docs/draft/tutorials/security/security_best_practices
…ed and executed on the same machine as the MCP client. Without proper sandboxing and consent requirements in place, the following attacks become possible: 1. An attacker includes a malicious "startup…
Build an MCP App
Model Context Protocol · in the page
extensions/apps/build
…call your tool, the host fetches the UI resource and renders it in a sandboxed iframe. You can then interact with your app and verify that tool calls work correctly. ![Example of the QR code MCP App…
MCP Apps
Model Context Protocol · in the page
extensions/apps/overview
…connected capabilities. * **Security guarantees.** MCP Apps run in a sandboxed iframe controlled by the host. They can't access the parent page, steal cookies, or escape their container. This mea…
SEP-1024: MCP Client Security Requirements for Local Server Installation
Model Context Protocol · in the page
seps/1024-mcp-client-security-requirements-for-local-server-
…e in consent dialogs * Recommendation for additional security layers (sandboxing, signatures) * Ongoing security research and community awareness
SEP-1865: MCP Apps - Interactive User Interfaces for MCP
Model Context Protocol · in the page
seps/1865-mcp-apps-interactive-user-interfaces-for-mcp
…andard MCP JSON-RPC protocol * **Security Model:** Mandatory iframe sandboxing with auditable communication This specification focuses on HTML content (`text/html;profile=mcp-app`) as the initial c…