Hardening Local MCP Servers

Security Requirements

MCP servers running locally on a user's machine require specific hardening to prevent network exposure and protect the host.

Network Binding

Bind to the loopback interface only:

# CORRECT - bind to loopback only
host: 127.0.0.1
port: 8080

# WRONG - exposed to the entire network
host: 0.0.0.0
port: 8080