🧭 docs: Document Port-Scoped allowedAddresses

[danny-avila]

Summary

I documented the config v1.3.10 allowedAddresses change so private SSRF exemptions require exact host:port entries.

• Updated Actions, MCP settings, MCP server, and config reference docs to show allowedAddresses as port-scoped private service exemptions.
• Clarified that bare hosts/IPs are rejected and that allowedDomains is authoritative when configured.
• Added the Config v1.3.10 changelog entry and bumped nearby config examples.

Implementation companion PR: danny-avila/LibreChat#13022

Change Type

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update
• Documentation update

Testing

• Ran git diff --check
• Ran pnpm build

Test Configuration:

• macOS
• pnpm 9.5.0
• Next.js 16.1.6

Checklist

• My code adheres to this project's style guidelines
• I have performed a self-review of my own code
• I have commented in any complex areas of my code
• I have made pertinent documentation changes
• My changes do not introduce new warnings
• I have written tests demonstrating that my changes are effective or that my feature works
• Local unit tests pass with my changes
• Any changes dependent on mine have been merged and published in downstream modules.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
librechat-ai	Ready	Preview, Comment	May 8, 2026 3:29pm

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌