MCP Apps Model Context Protocol
A rendering sandbox protects a particular browser boundary. Tool access through the host is a separate controlled path that still needs authorization for the exact requested effect.
A rendering sandbox protects a particular browser boundary. Tool access through the host is a separate controlled path that still needs authorization for the exact requested effect.
What the source establishes
MCP Apps documentation describes interactive resources rendered in host controlled sandboxed frames. Apps communicate with the host over a JSON RPC message channel and can request tool calls, while the host governs available capabilities and user consent.
Moona assessment and evidence limits
A rendering sandbox protects a particular browser boundary. Tool access through the host is a separate controlled path that still needs authorization for the exact requested effect.
Verification scope
Moona reviewed the retained source on 29 September 2026. Source acquisition and review establish provenance for this account; they do not reproduce an experiment, validate a vendor deployment or authorize an action.
Sources
This analysis interprets third-party reporting, research and announcements. Moona is not the original reporter of the underlying events.