diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index 12cf8a0..4851949 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -89,8 +89,10 @@ mcp:
     # HTTP(S) Portal API or local Spring resource location such as file:./config/local-toolserver-info-sample-v1.json.
     registry-url: ${MCP_PORTAL_REGISTRY_URL:}
     refresh-interval-seconds: ${MCP_PORTAL_REFRESH_INTERVAL_SECONDS:300}
-  # Declared per deployment. baseEndpoint is the execution address and is owned by this file only:
-  # nothing a Tool Service returns can change where MCP sends the call.
+  # Declared per deployment. baseEndpoint is only the base a relative manifest endpoint resolves against.
+  # The execution address itself comes from the Tool Service manifest (endpoint or _meta.endpoint), and an
+  # absolute HTTP(S) value there decides where MCP sends the call. Only scheme and host are validated, so
+  # a manifest can point MCP at any HTTP(S) host: keep manifest sources trusted.
   bundles: []
   trace:
     enabled: true    # Rejects oversized MCP request bodies before controller processing.