Skip to content

Assistants in a Browser

Trusted Codes connects to an assistant only on your own computer. Claude Desktop, Claude Code, Cursor and other apps that run on the same computer start the desktop app’s MCP server themselves; Connecting an Assistant shows how.

An assistant that runs in a browser, such as Claude on the web or ChatGPT, cannot do this. It runs on its provider’s servers and can only call an address on the internet. We do not offer such an address, and you should not create one.

Your code words are calculated on your devices from secrets that only your devices hold. Our servers never see the secrets or the words. A web assistant could get the words only if something on the internet could ask your computer for them, and anybody who finds that address could ask too. So the MCP server answers only on your own computer, at 127.0.0.1.

The assistant itself does receive the words you ask it for, in the same way as any other text you send to it. Ask only for what you want it to see.

Earlier versions of this page described a tunnel (Cloudflare Tunnel, ngrok, Tailscale Funnel) to the desktop app, and an older page described a web connector with the address mcp.trusted.codes. Neither is supported. If you followed either one:

  1. Stop the tunnel program, and remove it from your computer’s start-up items.
  2. In Claude, open Settings → Connectors and remove the connector Trusted Codes. In ChatGPT, delete any custom GPT action that points to your computer.
  3. Remove the desktop app’s access tokens that the tunnel or the connector used. Signing out does not remove them. Run tcc config list-api-tokens, then tcc config revoke-api-token <label> for each of them.
  4. Connect the assistant locally, as described in Connecting an Assistant.