Summary

• Adds Maybe Don't as an MCP security proxy option on the MCP Settings page (openhands/usage/settings/mcp-settings.mdx)
• Adds MaybeDontAnalyzer as a third-party security analyzer on the Security & Action Confirmation guide (sdk/guides/security.mdx)

MCP Settings Page

• Docker quick-start for running Maybe Don't
• Configuration examples for downstream MCP servers and pointing OpenHands at Maybe Don't
• Overview of CEL and AI-powered policy validation
• Cross-link to the security analyzer integration

Security Guide

• MaybeDontAnalyzer setup with gateway_url parameter and MAYBE_DONT_GATEWAY_URL env var
• Risk level mapping table (high/medium/low/unknown → SecurityRisk)
• Ready-to-run example following existing patterns (expandable code block, RunExampleCode snippet)
• Two-layer protection story: security analyzer (all actions) + MCP proxy (tool calls)

Context

This is part of the Maybe Don't OpenHands integration. The companion SDK PR adding MaybeDontAnalyzer is at OpenHands/software-agent-sdk#2142.

Test plan

• Verify MCP settings page renders correctly with the new "Security with Maybe Don't" section
• Verify security guide renders the new "Maybe Don't Security Analyzer" section with expandable example
• Verify cross-links between the two pages work
• Verify anchor links (#ready-to-run-example-maybe-dont, #maybe-dont-security-analyzer) resolve correctly

🤖 Generated with Claude Code