OptionalconnectOrigins allowed for fetch, XHR, and WebSocket connections.
OptionalresourceOrigins allowed for scripts, styles, images, fonts, and media.
OptionalframeOrigins allowed for nested iframes.
OptionalbaseOrigins allowed in the document's base URI.
Content Security Policy sources requested by an MCP App resource.