{
  "title": "Local vs Remote MCP FAQ",
  "schemaVersion": "1.0",
  "researchFreeze": "2026-08-26",
  "protocolRevision": "MCP 2026-07-28",
  "sourcePackage": "research/10",
  "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.",
  "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.",
  "checkedAt": "2026-08-26",
  "schemaNote": "Visible FAQ content only; no FAQ rich-result promise.",
  "count": 51,
  "records": [
    {
      "Question": "What is a local MCP server?",
      "Answer": "An MCP server whose code runs on or near the host machine, commonly as a client-launched stdio subprocess.",
      "id": "R10-FAQ001",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 1,
        "sourceIds": [],
        "raw": {
          "Question": "What is a local MCP server?",
          "Answer": "An MCP server whose code runs on or near the host machine, commonly as a client-launched stdio subprocess."
        }
      }
    },
    {
      "Question": "What is a remote MCP server?",
      "Answer": "A network-accessible MCP implementation, normally exposed through Streamable HTTP.",
      "id": "R10-FAQ002",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 2,
        "sourceIds": [],
        "raw": {
          "Question": "What is a remote MCP server?",
          "Answer": "A network-accessible MCP implementation, normally exposed through Streamable HTTP."
        }
      }
    },
    {
      "Question": "Is local MCP the same as stdio?",
      "Answer": "No. stdio is the canonical local subprocess pattern, but a local server can use HTTP or another reliable stream.",
      "id": "R10-FAQ003",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 3,
        "sourceIds": [],
        "raw": {
          "Question": "Is local MCP the same as stdio?",
          "Answer": "No. stdio is the canonical local subprocess pattern, but a local server can use HTTP or another reliable stream."
        }
      }
    },
    {
      "Question": "Is remote MCP the same as Streamable HTTP?",
      "Answer": "Not as a definition, but Streamable HTTP is the current standard remote transport.",
      "id": "R10-FAQ004",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 4,
        "sourceIds": [],
        "raw": {
          "Question": "Is remote MCP the same as Streamable HTTP?",
          "Answer": "Not as a definition, but Streamable HTTP is the current standard remote transport."
        }
      }
    },
    {
      "Question": "Which is safer: local or remote MCP?",
      "Answer": "Neither universally. Local emphasizes package, process, filesystem and endpoint authority; remote emphasizes identity, token, tenancy, network and service risks.",
      "id": "R10-FAQ005",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 5,
        "sourceIds": [],
        "raw": {
          "Question": "Which is safer: local or remote MCP?",
          "Answer": "Neither universally. Local emphasizes package, process, filesystem and endpoint authority; remote emphasizes identity, token, tenancy, network and service risks."
        }
      }
    },
    {
      "Question": "Does a local MCP server need authentication?",
      "Answer": "A stdio subprocess often relies on local process and configuration trust. Local HTTP still needs origin/host protection and may need authentication.",
      "id": "R10-FAQ006",
      "sourceIds": [
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 6,
        "sourceIds": [],
        "raw": {
          "Question": "Does a local MCP server need authentication?",
          "Answer": "A stdio subprocess often relies on local process and configuration trust. Local HTTP still needs origin/host protection and may need authentication."
        }
      }
    },
    {
      "Question": "Does a remote MCP server always need OAuth?",
      "Answer": "No. Public read-only or preauthenticated services may not use MCP OAuth, although user-specific sensitive services commonly should.",
      "id": "R10-FAQ007",
      "sourceIds": [
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 7,
        "sourceIds": [],
        "raw": {
          "Question": "Does a remote MCP server always need OAuth?",
          "Answer": "No. Public read-only or preauthenticated services may not use MCP OAuth, although user-specific sensitive services commonly should."
        }
      }
    },
    {
      "Question": "Can a remote MCP server be private?",
      "Answer": "Yes. It can run in a VPC, private data center, on-premises network or behind an enterprise gateway.",
      "id": "R10-FAQ008",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 8,
        "sourceIds": [],
        "raw": {
          "Question": "Can a remote MCP server be private?",
          "Answer": "Yes. It can run in a VPC, private data center, on-premises network or behind an enterprise gateway."
        }
      }
    },
    {
      "Question": "Can a local MCP server call cloud APIs?",
      "Answer": "Yes. It may use a local API key, OAuth token or cloud credential chain.",
      "id": "R10-FAQ009",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 9,
        "sourceIds": [],
        "raw": {
          "Question": "Can a local MCP server call cloud APIs?",
          "Answer": "Yes. It may use a local API key, OAuth token or cloud credential chain."
        }
      }
    },
    {
      "Question": "Can a remote MCP server read local files?",
      "Answer": "Not without an explicit upload, synchronization path, local bridge or separately granted device capability.",
      "id": "R10-FAQ010",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 10,
        "sourceIds": [],
        "raw": {
          "Question": "Can a remote MCP server read local files?",
          "Answer": "Not without an explicit upload, synchronization path, local bridge or separately granted device capability."
        }
      }
    },
    {
      "Question": "What transport should a new local server use?",
      "Answer": "Usually stdio when the client launches it as a process.",
      "id": "R10-FAQ011",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 11,
        "sourceIds": [],
        "raw": {
          "Question": "What transport should a new local server use?",
          "Answer": "Usually stdio when the client launches it as a process."
        }
      }
    },
    {
      "Question": "What transport should a new remote server use?",
      "Answer": "Streamable HTTP. The original HTTP+SSE transport is deprecated.",
      "id": "R10-FAQ012",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 12,
        "sourceIds": [],
        "raw": {
          "Question": "What transport should a new remote server use?",
          "Answer": "Streamable HTTP. The original HTTP+SSE transport is deprecated."
        }
      }
    },
    {
      "Question": "Does current remote MCP still use SSE?",
      "Answer": "Yes, but as request-scoped or subscription response streams within Streamable HTTP, not the old two-endpoint HTTP+SSE architecture.",
      "id": "R10-FAQ013",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 13,
        "sourceIds": [],
        "raw": {
          "Question": "Does current remote MCP still use SSE?",
          "Answer": "Yes, but as request-scoped or subscription response streams within Streamable HTTP, not the old two-endpoint HTTP+SSE architecture."
        }
      }
    },
    {
      "Question": "What happened to the MCP GET stream?",
      "Answer": "It was removed from modern Streamable HTTP in revision 2026-07-28.",
      "id": "R10-FAQ014",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 14,
        "sourceIds": [],
        "raw": {
          "Question": "What happened to the MCP GET stream?",
          "Answer": "It was removed from modern Streamable HTTP in revision 2026-07-28."
        }
      }
    },
    {
      "Question": "What happened to Mcp-Session-Id?",
      "Answer": "Modern 2026-07-28 operation removed protocol-level sessions and the session header; legacy revisions may still use it.",
      "id": "R10-FAQ015",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 15,
        "sourceIds": [],
        "raw": {
          "Question": "What happened to Mcp-Session-Id?",
          "Answer": "Modern 2026-07-28 operation removed protocol-level sessions and the session header; legacy revisions may still use it."
        }
      }
    },
    {
      "Question": "Is MCP stateless?",
      "Answer": "The current protocol core is stateless per request, while applications, tasks, databases and authorization can maintain state.",
      "id": "R10-FAQ016",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 16,
        "sourceIds": [],
        "raw": {
          "Question": "Is MCP stateless?",
          "Answer": "The current protocol core is stateless per request, while applications, tasks, databases and authorization can maintain state."
        }
      }
    },
    {
      "Question": "Can a remote server run long jobs?",
      "Answer": "Yes, using explicit state, durable jobs or the Tasks extension rather than hidden protocol-session affinity.",
      "id": "R10-FAQ017",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 17,
        "sourceIds": [],
        "raw": {
          "Question": "Can a remote server run long jobs?",
          "Answer": "Yes, using explicit state, durable jobs or the Tasks extension rather than hidden protocol-session affinity."
        }
      }
    },
    {
      "Question": "Can one remote endpoint serve many users?",
      "Answer": "Yes, if identity, authorization, tenant isolation, quotas and state partitioning are correctly implemented.",
      "id": "R10-FAQ018",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 18,
        "sourceIds": [],
        "raw": {
          "Question": "Can one remote endpoint serve many users?",
          "Answer": "Yes, if identity, authorization, tenant isolation, quotas and state partitioning are correctly implemented."
        }
      }
    },
    {
      "Question": "Can one local server serve many clients?",
      "Answer": "A local daemon can, but the usual stdio child-process pattern is scoped to one client relationship.",
      "id": "R10-FAQ019",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 19,
        "sourceIds": [],
        "raw": {
          "Question": "Can one local server serve many clients?",
          "Answer": "A local daemon can, but the usual stdio child-process pattern is scoped to one client relationship."
        }
      }
    },
    {
      "Question": "Can a remote server be single tenant?",
      "Answer": "Yes. Remote location does not imply multi-tenancy.",
      "id": "R10-FAQ020",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 20,
        "sourceIds": [],
        "raw": {
          "Question": "Can a remote server be single tenant?",
          "Answer": "Yes. Remote location does not imply multi-tenancy."
        }
      }
    },
    {
      "Question": "Can a local server be shared by a team?",
      "Answer": "The package/configuration can be shared, but each user commonly runs a separate process unless a shared daemon is deployed.",
      "id": "R10-FAQ021",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 21,
        "sourceIds": [],
        "raw": {
          "Question": "Can a local server be shared by a team?",
          "Answer": "The package/configuration can be shared, but each user commonly runs a separate process unless a shared daemon is deployed."
        }
      }
    },
    {
      "Question": "How are local MCP servers installed?",
      "Answer": "Commonly through npm/PyPI launchers, binaries, containers, host configuration or MCP Bundles.",
      "id": "R10-FAQ022",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 22,
        "sourceIds": [],
        "raw": {
          "Question": "How are local MCP servers installed?",
          "Answer": "Commonly through npm/PyPI launchers, binaries, containers, host configuration or MCP Bundles."
        }
      }
    },
    {
      "Question": "How are remote MCP servers installed?",
      "Answer": "Usually they are connected by URL and, when needed, an authorization flow rather than installed as server code.",
      "id": "R10-FAQ023",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 23,
        "sourceIds": [],
        "raw": {
          "Question": "How are remote MCP servers installed?",
          "Answer": "Usually they are connected by URL and, when needed, an authorization flow rather than installed as server code."
        }
      }
    },
    {
      "Question": "What is MCPB?",
      "Answer": "An Anthropic MCP Bundle containing a local server and manifest for one-click desktop installation.",
      "id": "R10-FAQ024",
      "sourceIds": [
        "S018",
        "S481",
        "S066",
        "S067"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 24,
        "sourceIds": [],
        "raw": {
          "Question": "What is MCPB?",
          "Answer": "An Anthropic MCP Bundle containing a local server and manifest for one-click desktop installation."
        }
      }
    },
    {
      "Question": "Does MCPB require OAuth?",
      "Answer": "Anthropic’s local MCPB guidance says the local bundle pattern does not require OAuth, although the bundled server may authenticate to upstream services in its own way.",
      "id": "R10-FAQ025",
      "sourceIds": [
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 25,
        "sourceIds": [],
        "raw": {
          "Question": "Does MCPB require OAuth?",
          "Answer": "Anthropic’s local MCPB guidance says the local bundle pattern does not require OAuth, although the bundled server may authenticate to upstream services in its own way."
        }
      }
    },
    {
      "Question": "Can ChatGPT connect directly to a local stdio server?",
      "Answer": "No under current product guidance; ChatGPT connects to remote servers and offers Secure MCP Tunnel for private/local deployments.",
      "id": "R10-FAQ026",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 26,
        "sourceIds": [],
        "raw": {
          "Question": "Can ChatGPT connect directly to a local stdio server?",
          "Answer": "No under current product guidance; ChatGPT connects to remote servers and offers Secure MCP Tunnel for private/local deployments."
        }
      }
    },
    {
      "Question": "Can Claude Code use local and remote MCP?",
      "Answer": "Yes. Current Claude Code documentation supports local stdio and remote HTTP/SSE, including OAuth.",
      "id": "R10-FAQ027",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 27,
        "sourceIds": [],
        "raw": {
          "Question": "Can Claude Code use local and remote MCP?",
          "Answer": "Yes. Current Claude Code documentation supports local stdio and remote HTTP/SSE, including OAuth."
        }
      }
    },
    {
      "Question": "Can VS Code run local and remote servers?",
      "Answer": "Yes. Current VS Code documentation includes command-based local servers and URL-based remote servers.",
      "id": "R10-FAQ028",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 28,
        "sourceIds": [],
        "raw": {
          "Question": "Can VS Code run local and remote servers?",
          "Answer": "Yes. Current VS Code documentation includes command-based local servers and URL-based remote servers."
        }
      }
    },
    {
      "Question": "Can Cursor use local and remote servers?",
      "Answer": "Current Cursor documentation supports stdio, Streamable HTTP and legacy SSE patterns.",
      "id": "R10-FAQ029",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 29,
        "sourceIds": [],
        "raw": {
          "Question": "Can Cursor use local and remote servers?",
          "Answer": "Current Cursor documentation supports stdio, Streamable HTTP and legacy SSE patterns."
        }
      }
    },
    {
      "Question": "What is a local MCP proxy?",
      "Answer": "A local process that translates a host’s stdio connection into a remote HTTP/OAuth connection.",
      "id": "R10-FAQ030",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 30,
        "sourceIds": [],
        "raw": {
          "Question": "What is a local MCP proxy?",
          "Answer": "A local process that translates a host’s stdio connection into a remote HTTP/OAuth connection."
        }
      }
    },
    {
      "Question": "Is a local proxy safe?",
      "Answer": "It adds package, command-execution and token-storage risks and should be treated as another privileged component.",
      "id": "R10-FAQ031",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 31,
        "sourceIds": [],
        "raw": {
          "Question": "Is a local proxy safe?",
          "Answer": "It adds package, command-execution and token-storage risks and should be treated as another privileged component."
        }
      }
    },
    {
      "Question": "What is DNS rebinding in local MCP?",
      "Answer": "A web-origin attack that can reach a weakly protected localhost HTTP server; current MCP requires Origin validation and recommends localhost binding.",
      "id": "R10-FAQ032",
      "sourceIds": [
        "S133",
        "S134",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S111",
        "S112",
        "S207",
        "S208",
        "S210",
        "S212",
        "S238",
        "S233",
        "S245",
        "S243",
        "S147",
        "S109",
        "S196",
        "S485"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 32,
        "sourceIds": [],
        "raw": {
          "Question": "What is DNS rebinding in local MCP?",
          "Answer": "A web-origin attack that can reach a weakly protected localhost HTTP server; current MCP requires Origin validation and recommends localhost binding."
        }
      }
    },
    {
      "Question": "Why not bind a local MCP HTTP server to 0.0.0.0?",
      "Answer": "It exposes the service beyond loopback and expands the attack surface.",
      "id": "R10-FAQ033",
      "sourceIds": [
        "S057",
        "S132",
        "S131",
        "S055",
        "S058",
        "S053",
        "S027",
        "S038",
        "S037",
        "S320",
        "S044",
        "S321",
        "S187",
        "S135"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 33,
        "sourceIds": [],
        "raw": {
          "Question": "Why not bind a local MCP HTTP server to 0.0.0.0?",
          "Answer": "It exposes the service beyond loopback and expands the attack surface."
        }
      }
    },
    {
      "Question": "Should a local server inherit the entire host environment?",
      "Answer": "No. Pass only the variables it needs because inherited secrets can leak to the child process.",
      "id": "R10-FAQ034",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 34,
        "sourceIds": [],
        "raw": {
          "Question": "Should a local server inherit the entire host environment?",
          "Answer": "No. Pass only the variables it needs because inherited secrets can leak to the child process."
        }
      }
    },
    {
      "Question": "Where should local server secrets live?",
      "Answer": "Prefer host-sensitive configuration or OS credential stores over command-line arguments and committed files.",
      "id": "R10-FAQ035",
      "sourceIds": [
        "S133",
        "S134",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S111",
        "S112",
        "S207",
        "S208",
        "S210",
        "S212",
        "S238",
        "S233",
        "S245",
        "S243",
        "S147",
        "S109",
        "S196",
        "S485"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 35,
        "sourceIds": [],
        "raw": {
          "Question": "Where should local server secrets live?",
          "Answer": "Prefer host-sensitive configuration or OS credential stores over command-line arguments and committed files."
        }
      }
    },
    {
      "Question": "Where should remote server secrets live?",
      "Answer": "Use a managed secret store or workload identity; store delegated tokens encrypted and partitioned by user/tenant.",
      "id": "R10-FAQ036",
      "sourceIds": [
        "S133",
        "S134",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S111",
        "S112",
        "S207",
        "S208",
        "S210",
        "S212",
        "S238",
        "S233",
        "S245",
        "S243",
        "S147",
        "S109",
        "S196",
        "S485"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 36,
        "sourceIds": [],
        "raw": {
          "Question": "Where should remote server secrets live?",
          "Answer": "Use a managed secret store or workload identity; store delegated tokens encrypted and partitioned by user/tenant."
        }
      }
    },
    {
      "Question": "Is OAuth enough to secure remote MCP?",
      "Answer": "No. Correct object authorization, tenant isolation, scopes, endpoint security and safe tool implementation remain necessary.",
      "id": "R10-FAQ037",
      "sourceIds": [
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 37,
        "sourceIds": [],
        "raw": {
          "Question": "Is OAuth enough to secure remote MCP?",
          "Answer": "No. Correct object authorization, tenant isolation, scopes, endpoint security and safe tool implementation remain necessary."
        }
      }
    },
    {
      "Question": "What is the best deployment for a SaaS provider?",
      "Answer": "Usually a vendor-operated remote server because the authoritative data, permissions and API changes already live in the service.",
      "id": "R10-FAQ038",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 38,
        "sourceIds": [],
        "raw": {
          "Question": "What is the best deployment for a SaaS provider?",
          "Answer": "Usually a vendor-operated remote server because the authoritative data, permissions and API changes already live in the service."
        }
      }
    },
    {
      "Question": "What is the best deployment for a filesystem server?",
      "Answer": "Usually local, because the target files live on the user’s machine.",
      "id": "R10-FAQ039",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 39,
        "sourceIds": [],
        "raw": {
          "Question": "What is the best deployment for a filesystem server?",
          "Answer": "Usually local, because the target files live on the user’s machine."
        }
      }
    },
    {
      "Question": "What is the best deployment for an on-prem database?",
      "Answer": "Local, private remote or gateway-mediated, depending on user count, network architecture and audit needs.",
      "id": "R10-FAQ040",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 40,
        "sourceIds": [],
        "raw": {
          "Question": "What is the best deployment for an on-prem database?",
          "Answer": "Local, private remote or gateway-mediated, depending on user count, network architecture and audit needs."
        }
      }
    },
    {
      "Question": "Is local MCP always faster?",
      "Answer": "No. Local avoids wide-area transport but can have process startup and still call distant APIs; measure the whole operation.",
      "id": "R10-FAQ041",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 41,
        "sourceIds": [],
        "raw": {
          "Question": "Is local MCP always faster?",
          "Answer": "No. Local avoids wide-area transport but can have process startup and still call distant APIs; measure the whole operation."
        }
      }
    },
    {
      "Question": "Is remote MCP always more expensive?",
      "Answer": "No. Remote adds hosting and operations, while local adds packaging, endpoint support and distributed update costs.",
      "id": "R10-FAQ042",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 42,
        "sourceIds": [],
        "raw": {
          "Question": "Is remote MCP always more expensive?",
          "Answer": "No. Remote adds hosting and operations, while local adds packaging, endpoint support and distributed update costs."
        }
      }
    },
    {
      "Question": "Can serverless platforms host MCP?",
      "Answer": "Yes, especially for stateless and bursty workloads; verify streaming, time limits, cold starts, state and authorization.",
      "id": "R10-FAQ043",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 43,
        "sourceIds": [],
        "raw": {
          "Question": "Can serverless platforms host MCP?",
          "Answer": "Yes, especially for stateless and bursty workloads; verify streaming, time limits, cold starts, state and authorization."
        }
      }
    },
    {
      "Question": "Can Cloudflare Workers host remote MCP?",
      "Answer": "Yes. Cloudflare documents modern stateless and legacy-compatible handlers.",
      "id": "R10-FAQ044",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 44,
        "sourceIds": [],
        "raw": {
          "Question": "Can Cloudflare Workers host remote MCP?",
          "Answer": "Yes. Cloudflare documents modern stateless and legacy-compatible handlers."
        }
      }
    },
    {
      "Question": "Can Cloud Run host remote MCP?",
      "Answer": "Yes. Google Cloud provides current Cloud Run MCP hosting guidance.",
      "id": "R10-FAQ045",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 45,
        "sourceIds": [],
        "raw": {
          "Question": "Can Cloud Run host remote MCP?",
          "Answer": "Yes. Google Cloud provides current Cloud Run MCP hosting guidance."
        }
      }
    },
    {
      "Question": "Can Azure Functions host remote MCP?",
      "Answer": "Yes. Azure Functions documents an MCP trigger and remote deployment patterns.",
      "id": "R10-FAQ046",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 46,
        "sourceIds": [],
        "raw": {
          "Question": "Can Azure Functions host remote MCP?",
          "Answer": "Yes. Azure Functions documents an MCP trigger and remote deployment patterns."
        }
      }
    },
    {
      "Question": "What is an enterprise MCP gateway?",
      "Answer": "A control plane or proxy that can centralize identity, server catalogs, tool policy, token exchange, audit and rate limits.",
      "id": "R10-FAQ047",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 47,
        "sourceIds": [],
        "raw": {
          "Question": "What is an enterprise MCP gateway?",
          "Answer": "A control plane or proxy that can centralize identity, server catalogs, tool policy, token exchange, audit and rate limits."
        }
      }
    },
    {
      "Question": "Does a gateway replace server authorization?",
      "Answer": "No. The downstream server and underlying system must still enforce permissions.",
      "id": "R10-FAQ048",
      "sourceIds": [
        "S133",
        "S471",
        "S475",
        "S191",
        "S006",
        "S005",
        "S192",
        "S004",
        "S193",
        "S488"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 48,
        "sourceIds": [],
        "raw": {
          "Question": "Does a gateway replace server authorization?",
          "Answer": "No. The downstream server and underlying system must still enforce permissions."
        }
      }
    },
    {
      "Question": "What is a hybrid MCP architecture?",
      "Answer": "A host or system combining local and remote servers or bridging one boundary to the other.",
      "id": "R10-FAQ049",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 49,
        "sourceIds": [],
        "raw": {
          "Question": "What is a hybrid MCP architecture?",
          "Answer": "A host or system combining local and remote servers or bridging one boundary to the other."
        }
      }
    },
    {
      "Question": "When should I use both local and remote servers?",
      "Answer": "When the workflow needs device-local capabilities and shared cloud/enterprise services at the same time.",
      "id": "R10-FAQ050",
      "sourceIds": [
        "S121",
        "S057",
        "S132",
        "S131",
        "S133"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 50,
        "sourceIds": [],
        "raw": {
          "Question": "When should I use both local and remote servers?",
          "Answer": "When the workflow needs device-local capabilities and shared cloud/enterprise services at the same time."
        }
      }
    },
    {
      "Question": "How often should host compatibility be checked?",
      "Answer": "At least monthly for a public current-state article, and immediately after major product or protocol releases.",
      "id": "R10-FAQ051",
      "sourceIds": [
        "S258",
        "S462",
        "S463",
        "S145",
        "S464",
        "S259",
        "S175",
        "S140",
        "S141",
        "S269",
        "S465",
        "S274",
        "S144",
        "S466",
        "S284"
      ],
      "evidenceStatus": "editorially curated question-topic evidence; not derived from archive citation tokens",
      "archive": {
        "namespace": "research/10/faq.json",
        "row": 51,
        "sourceIds": [],
        "raw": {
          "Question": "How often should host compatibility be checked?",
          "Answer": "At least monthly for a public current-state article, and immediately after major product or protocol releases."
        }
      }
    }
  ]
}