Add MCP server (v1 read-only): toggle, per-pane gate, panel UI

README.md

@@ -58,6 +58,22 @@ Font size persists per pane in `workspace.json`, so a zoomed pane stays zoomed a
 
 Layout + per-pane settings auto-save to `%APPDATA%\com.megaproxy.tiletopia\workspace.json` (debounced 500 ms).
 
+### MCP server (Claude can drive the workspace)
+
+The titlebar 🤖 button opens a small panel that starts an MCP (Model Context Protocol) server on `127.0.0.1`. A Claude session — running anywhere on the machine, including inside one of tiletopia's own panes — can connect to it, read scrollback, wait for commands to settle, and inspect the layout. v1 is **read-only**: no spawning, no keystroke injection, no host editing.
+
+- **Off by default.** Click the button, hit **Server: ON** to start. The panel shows the bound URL + a randomly-generated bearer token and a ready-to-paste Claude config snippet.
+- **Default-deny per pane.** Toggle the 🤖 chip in any pane's toolbar to allow MCP to see it. Panes without the chip on are invisible to the server.
+- **Saved SSH passwords are never exposed** through the MCP surface.
+- **WSL connectivity.** For Claude running inside WSL2 to reach the Windows-side server at `127.0.0.1`, set `networkingMode=mirrored` in `%UserProfile%\.wslconfig` (Win 11 22H2+):
+
+  ```
+  [wsl2]
+  networkingMode=mirrored
+  ```
+
+  Without mirrored mode you can still connect via the WSL gateway IP (default route).
+
 ## Stack
 
 - **Tauri 2** (Rust backend, WebView2 frontend) — small bundle, native NSIS installer.