Harden docs MCP local exposure defaults

2026-06-08 15:52:02 -07:00
parent 6a4d8673d1
commit 8fcd94d2c5
7 changed files with 43 additions and 6 deletions
--- a/.env.example
+++ b/.env.example
@@ -18,6 +18,9 @@ CONTEXT_KIT_SEARXNG_SECRET=change-me-local-only
 CONTEXT_KIT_DOCS_PORT=8776
 # Override only if you proxy the service behind another hostname or path.
 # CONTEXT_KIT_DOCS_HTTP_URL=http://127.0.0.1:8776/mcp
+# Browser CORS is disabled by default. If a browser-based local client needs
+# access, set one or more exact origins separated by spaces. Avoid `*`.
+# CONTEXT_KIT_DOCS_ALLOW_ORIGIN=http://127.0.0.1:3000

 # Docs indexing defaults.
 CONTEXT_KIT_DOCS_TTL=24h