/MCP/Content lets an MCP client make outbound requests using Neuron’s content decoders. When the Neuron has a client certificate, requests can use it for mTLS.
Tools
The full privilege prefix is
OAUTH.Scope.MCP.InternetContent.
Common parameters
URI: absolute target URI.Accept: expected response media type; defaults to*/*.Accept-Language: preferred human language.Timeout: 1–60,000 ms; defaults to 30,000 ms.AdditionalHeaders: optional string-valued request headers.Payload: object encoded for POST, PUT, or QUERY.
Egress policy
This server has open-world access. GrantingGet allows an agent to reach addresses visible from the Neuron, which may include private infrastructure.
Production controls should:
- allow secure schemes such as HTTPS and reject insecure HTTP;
- block loopback, link-local, cloud metadata, and private address ranges unless explicitly needed;
- resolve DNS again at connection time to reduce rebinding risk;
- restrict target hosts and ports;
- remove credentials from redirects to another origin;
- cap body sizes and timeouts;
- log target, actor, method, status, and policy decision.