OptionalcspOptionaldomainDedicated origin for view sandbox.
Useful when views need stable, dedicated origins for OAuth callbacks, CORS policies, or API key allowlists.
Host-dependent: The format and validation rules for this field are determined by each host. Servers MUST consult host-specific documentation for the expected domain format. Common patterns include:
{hash}.claudemcpcontent.com)www-example-com.oaiusercontent.com)If omitted, host uses default sandbox origin (typically per-conversation).
OptionalpermissionsOptionalprefersVisual boundary preference - true if view prefers a visible border.
Boolean requesting whether a visible border and background is provided by the host. Specifying an explicit value for this is recommended because hosts' defaults may vary.
true: request visible border + backgroundfalse: request no visible border + background
Description
UI Resource metadata for security and rendering configuration.