windows-safe-mcp Grok should use the secret URL that ends in /t//mcp. A bearer token in the Authorization header also works for /mcp. This process listens on localhost only.