createMcpHandler(...).fetch mounted on a Hono app — the web-standard face that runs on Cloudflare Workers, Deno, Bun and Node.js (via @hono/node-server). The @modelcontextprotocol/hono adapter (createMcpHonoApp()) arms localhost DNS-rebinding / origin protection by
default.
HTTP-only by definition.