Module http_server 

Optional remote MCP transport over Streamable HTTP.

This is what lets a cloud client (e.g. ChatGPT “developer mode” custom connectors) talk to winx. The default stdio transport is for local clients (Claude Desktop, Cursor); this one serves the MCP protocol over HTTP at /mcp so it can sit behind an HTTPS tunnel (cloudflared/ngrok).

SECURITY

winx exposes arbitrary shell execution and filesystem access. Serving it over the network is effectively remote code execution on this machine. Therefore:

• a non-empty bearer token is required; every request must present it via Authorization: Bearer <token> or a ?token=<token> query parameter;
• bind to a loopback address and put an authenticated HTTPS tunnel in front — never expose this straight to 0.0.0.0 on an untrusted network;
• turn it off when you’re done testing.

Functions

start_http_server

Start the Streamable HTTP MCP server.