让用户信任自己的MCP客户端，同时避免钓鱼漏洞

Letting users trust their own MCP clients, without opening a phishing hole