Where the real risk lived
Giving an AI tool permission to fetch arbitrary URLs creates SSRF, redirect, payload-size, timeout, and ambiguous-failure risks.
CASE STUDY / MCP · Network safety
readable-mcp
A production-oriented MCP server that turns permitted web pages into clean Markdown while treating network access as a security boundary.
SourcePublic
Implementation available for review.
SecuritySSRF-safe
Resolve, validate, redirect-check, and pin.
ProtocolMCP
Structured tool surface for AI clients.
LicenseMIT
Reusable open-source implementation.
Design the controls with the happy path
Resolve and validate destinations, recheck redirects, pin approved connections, bound requests, cache safe results, and return typed failures an AI client can act on.
What the system proves
A public, inspectable pattern for dependable MCP integrations where the unhappy paths are designed alongside the tool surface.
Implementation surface
Technologies chosen around the workflow.
PythonFastMCPSSRF protectionTyped errorsRate limitsRetriesCaching
Paid entry engagement · €1,500
Need the same production discipline on your system?
The Architecture Review turns a use case, prototype, or delivery opportunity into a defensible implementation plan in five business days.