Skip to content

McpAppCsp

Content Security Policy domains requested by an MCP App resource.

public sealed record McpAppCsp : IEquatable<McpAppCsp>
  • IEquatable<McpAppCsp>

Origins allowed as document base URIs.

public IReadOnlyList<string>? BaseUriDomains { get; init; }

IReadOnlyList<string>

Origins allowed for fetch, XHR, and WebSocket connections.

public IReadOnlyList<string>? ConnectDomains { get; init; }

IReadOnlyList<string>

Origins allowed for nested iframes.

public IReadOnlyList<string>? FrameDomains { get; init; }

IReadOnlyList<string>

Origins allowed for images, scripts, stylesheets, fonts, and media.

public IReadOnlyList<string>? ResourceDomains { get; init; }

IReadOnlyList<string>