Client-side trial only. This does not publish an MCP server or implement OAuth. Never put the Netlify server-side secret into this HTML or source code. A live browser request may be blocked by CORS even when a real MCP client succeeds.
This interface defines intended policy only. The remote server must enforce all authentication, tenant isolation and quotas. Nothing here publishes accounts, tokens or OAuth endpoints.
NOT DEPLOYED / NOT VERIFIED. Owner-only policy is a design configuration, not an access-control guarantee.
Only enter the token on a trusted copy of the HTML. For security, use this diagnostic in a trusted local environment; browser extensions and scripts may access page inputs.
Live tests send only the selected JSON-RPC message, never generation requests. HTTP 401 means authorization was rejected. HTTP 400/406 may indicate protocol headers or initialization requirements. A CORS error is not proof that the server is down.
Ready. Select Offline simulation and Run one test.