fetch-mcp MCP endpoint: /mcp Configure per-connection whitelist with ?allowed_domains=example.com or X-Allowed-Root-Domains. If no whitelist is configured, no domain whitelist is applied.