As MCP McpUiResourceCsp JSON (the host's hostCapabilities.sandbox.csp).
McpUiResourceCsp
hostCapabilities.sandbox.csp