secure remote MCP actions