A whitelisted web-access MCP server. It exposes a single `web_fetch` tool whose reach is limited to an operator-controlled list of hostnames. Any other host has to be approved by a human, and is refused without that approval. It exists because general-purpose web tools give an agent unrestricted outbound