Allow once
Run only the current exact proposal.
Let models act.
Keep the decision.
PUI connects directly to reviewed public Streamable HTTP MCP servers. New unmatched actions are bounded and shown for exact approval; optional Always allow or deny rules stay scoped to the reviewed authority.
Removable Exa defaultExact-call approvalFiles in the answerCredentials stay local
No generic proxy between you and the tool.
The browser connects to the exact public or explicitly trusted LAN HTTPS endpoint you reviewed.
1Your conversationPrepared context remains bounded.
→2ApprovalReview tool, destination and input.
→3MCP serverOnly the approved request is sent.
ENABLED, NOT MANDATORY
Exa starts enabled in new workspaces.
Test this browser to use reviewed public web search and page retrieval with limited credential-free access, remove Exa completely when your own MCP already searches, or add the reviewed template again later.
Open the MCP workspace →RICH OUTPUT · YOUR SERVER
Keep useful tool results in the conversation.
Add public or Trusted LAN endpoints with bound credentials and explicit authority. Supported images, text, PDF and DOCX output is verified outside the model transcript and shown as a local response card; safe HTTPS links are never prefetched.
See files and downloads →Ask once, remember carefully.
Always allow
Remember authority for this exact server and tool.
Deny once
Return a safe denial without contacting the server.
Always deny
Keep future proposals blocked until you change the decision.
Let tools return more than text.
Open MCP, test a server and keep verified output with the answer.