Runs locally as your own process over stdio, so it opens no network listener and adds no attack surface to the deployed app. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>