TAG
Secure self-hosted MCP server exposing selected Linux directories as controlled workdirs via OpenAI Secure MCP Tunnel — read-only by default, opt-in mutations, binary transfer, and optional Codex/Claude Agent Bridge.