This file must be served from the same origin as the ContextForge admin UI so the host page can access the iframe's DOM (same-origin policy requirement).
The harness is available at:
/static/iframe-test-harness.html
mcpgateway/static/iframe-test-harness.html