Local access only: TypeX MCP service binds to 127.0.0.1:52222, the local loopback address (localhost). Only your local machine can access it â external networks and other devices on the LAN cannot connect to this port, fundamentally eliminating the risk of remote attacks.
No cloud relay: AI tools communicate directly with the TypeX client via the local HTTP protocol. All data flows locally on your machine without passing through any third-party servers or cloud relays.
On-demand access: MCP service is only active while the TypeX desktop app is running. Once you disable the MCP switch or exit TypeX, AI tools immediately lose the ability to interact with TypeX, leaving no persistent remote access channel behind.
AI tools have full operational access: When MCP is enabled, connected AI tools (such as Claude Code, Codex, etc.) can call all methods currently supported by TypeX, including but not limited to reading all your message history, searching contacts and groups, sending messages, managing group members, and downloading files. Please ensure you trust the AI tool you are using and its runtime environment.
Be cautious with sensitive conversations: If your TypeX contains chat records involving trade secrets, personal privacy, or other sensitive information, be aware that AI tools may read these contents during analysis or summarization. We recommend separately evaluating whether highly sensitive conversations are suitable for operation within an MCP environment.
Understand how your AI tool handles data: Different AI tools have different data handling policies â some may send conversation context to cloud servers for model inference. We recommend reviewing the privacy policy and data processing practices of the AI tool you are using, and assessing how well they match the sensitivity of your information.
Keep your terminal environment secure: Since MCP communicates through a local port, any program with access to your local terminal could theoretically invoke this interface. We recommend keeping your device secure and avoiding installing or running untrusted third-party software.
Sensitive operations require confirmation: TypeX MCP has a built-in secondary confirmation mechanism for sensitive operations such as removing members or adding friends. The AI will ask for your confirmation before executing. Please carefully verify the target of the operation before approving to avoid mistakes.