diff --git a/financial-services/cmcp-config.yaml b/financial-services/cmcp-config.yaml
index 8189450..3555944 100644
--- a/financial-services/cmcp-config.yaml
+++ b/financial-services/cmcp-config.yaml
@@ -1,6 +1,6 @@
 policy_bundle_path: ./policy
 catalog_path: ./catalog.json
-listen_addr: 0.0.0.0:8443
+listen_addr: 127.0.0.1:8443  # tokenless dev mode binds to loopback; set CMCP_BEARER_TOKEN for non-loopback binds
 max_response_size_bytes: 2097152
 attestation:
   provider: auto
diff --git a/healthcare/cmcp-config.yaml b/healthcare/cmcp-config.yaml
index 3678de8..461fe2b 100644
--- a/healthcare/cmcp-config.yaml
+++ b/healthcare/cmcp-config.yaml
@@ -1,6 +1,6 @@
 policy_bundle_path: ./policy
 catalog_path: ./catalog.json
-listen_addr: 0.0.0.0:8443
+listen_addr: 127.0.0.1:8443  # tokenless dev mode binds to loopback; set CMCP_BEARER_TOKEN for non-loopback binds
 audit_db_path: ./audit.db
 attestation:
   provider: auto
diff --git a/startup-tpm/README.md b/startup-tpm/README.md
index 6ae33a3..5796cae 100644
--- a/startup-tpm/README.md
+++ b/startup-tpm/README.md
@@ -106,8 +106,8 @@ cmcp start --config cmcp-config.yaml
 Expected startup output ends with:
 
 ```
-cMCP Runtime starting: TEE: software-only, listen: 0.0.0.0:8443
-INFO:     Uvicorn running on http://0.0.0.0:8443
+cMCP Runtime starting: TEE: software-only, listen: 127.0.0.1:8443
+INFO:     Uvicorn running on http://127.0.0.1:8443
 ```
 
 ---
diff --git a/startup-tpm/cmcp-config.yaml b/startup-tpm/cmcp-config.yaml
index f8571e1..f2426a2 100644
--- a/startup-tpm/cmcp-config.yaml
+++ b/startup-tpm/cmcp-config.yaml
@@ -1,6 +1,6 @@
 policy_bundle_path: ./policy
 catalog_path: ./catalog.json
-listen_addr: 0.0.0.0:8443
+listen_addr: 127.0.0.1:8443  # tokenless dev mode binds to loopback; set CMCP_BEARER_TOKEN for non-loopback binds
 attestation:
   provider: auto
   enforcement_mode: advisory