MCP Apps became the first official MCP extension, and the interface renders in a sandboxed iframe that talks to the client over postMessage.
Submitting an MCP App to the directory needs 3 to 5 PNG screenshots, at least 1000px wide, cropped to the app response.
Any link destination you do not declare in allowed link URIs makes the user confirm every click.