diff --git a/docs/src/guide/client/html-resource.md b/docs/src/guide/client/html-resource.md
index 1fbe34c8..10090977 100644
--- a/docs/src/guide/client/html-resource.md
+++ b/docs/src/guide/client/html-resource.md
@@ -11,6 +11,7 @@ export interface HTMLResourceRendererProps {
   resource: Partial<Resource>;
   onUIAction?: (result: UIActionResult) => Promise<any>;
   style?: React.CSSProperties;
+  proxy?: string;
   iframeProps?: Omit<React.HTMLAttributes<HTMLIFrameElement>, 'src' | 'srcDoc' | 'ref' | 'style'>;
 }
 ```
@@ -28,6 +29,7 @@ The component accepts the following props:
   ```
   If you don't provide a callback for a specific type, the default handler will be used.
 - **`style`**: (Optional) Custom styles for the iframe.
+- **`proxy`**: (Optional) A URL to a proxy script. This is useful for hosts with a strict Content Security Policy (CSP). When provided, external URLs will be rendered in a nested iframe hosted at this URL. For example, if `proxy` is `https://my-proxy.com/`, the final URL will be `https://my-proxy.com/?url=<encoded_original_url>`. For your convenience, mcp-ui hosts a proxy script at `https://proxy.mcpui.dev`, which you can use as a the prop value without any setup (see `examples/external-url-demo`).
 - **`iframeProps`**: (Optional) Custom props for the iframe.
 
 ## How It Works
@@ -41,6 +43,7 @@ The component accepts the following props:
       - Ignores comment lines starting with `#` and empty lines
       - If using `blob`, it decodes it from Base64.
       - Renders an `<iframe>` with its `src` set to the first valid URL.
+      - If a valid URL is passed to the `proxy` prop, it will be used as the source for the iframe, which then renders the external URL in a nested iframe. For example, if `proxy` is `https://my-proxy.com/`, the final URL will be `https://my-proxy.com/?url=<encoded_original_url>`.
       - Sandbox: `allow-scripts allow-same-origin` (needed for some external sites; be mindful of security).
     - For resources with `mimeType: 'text/html'`:
       - Expects `resource.text` or `resource.blob` to contain HTML.
diff --git a/docs/src/guide/client/resource-renderer.md b/docs/src/guide/client/resource-renderer.md
index abd950f5..a747d85a 100644
--- a/docs/src/guide/client/resource-renderer.md
+++ b/docs/src/guide/client/resource-renderer.md
@@ -45,6 +45,7 @@ interface UIResourceRendererProps {
 - **`supportedContentTypes`**: Optional array to restrict which content types are allowed (`['rawHtml', 'externalUrl', 'remoteDom']`)
 - **`htmlProps`**: Optional props for the `<HTMLResourceRenderer>`
   - **`style`**: Optional custom styles for iframe-based resources
+  - **`proxy`**: Optional. A URL to a proxy script, which is useful for hosts with a strict Content Security Policy (CSP). When provided, external URLs (`text/uri-list`) will be rendered in a nested iframe hosted at this URL. For example, if `proxy` is `https://my-proxy.com/`, the final URL will be `https://my-proxy.com/?url=<encoded_original_url>`. For your convenience, mcp-ui hosts a proxy script at `https://proxy.mcpui.dev`, which you can use as a the prop value without any setup (see `examples/external-url-demo`). IMPORTANT: for security reasons, you MUST NOT host the proxy script on the host's origin.
   - **`iframeProps`**: Optional props passed to iframe elements (for HTML/URL resources)
 - **`remoteDomProps`**: Optional props for the `<RemoteDOMResourceRenderer>`
   - **`library`**: Optional component library for Remote DOM resources (defaults to `basicComponentLibrary`)
diff --git a/examples/external-url-demo/index.html b/examples/external-url-demo/index.html
new file mode 100644
index 00000000..e9ca4cf8
--- /dev/null
+++ b/examples/external-url-demo/index.html
@@ -0,0 +1,16 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      http-equiv="Content-Security-Policy"
+      content="frame-src 'self' https://proxy.mcpui.dev;"
+    />
+    <title>MCP-UI Proxy Demo</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/examples/external-url-demo/package.json b/examples/external-url-demo/package.json
new file mode 100644
index 00000000..6b879c52
--- /dev/null
+++ b/examples/external-url-demo/package.json
@@ -0,0 +1,29 @@
+{
+  "name": "external-url-demo",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "eslint . --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "@mcp-ui/client": "workspace:*",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.23",
+    "@types/react-dom": "^18.3.7",
+    "@typescript-eslint/eslint-plugin": "^7.18.0",
+    "@typescript-eslint/parser": "^7.18.0",
+    "@vitejs/plugin-react": "^4.6.0",
+    "eslint": "^9.29.0",
+    "eslint-plugin-react-hooks": "^5.2.0",
+    "eslint-plugin-react-refresh": "0.4.7",
+    "typescript": "~5.8.3",
+    "vite": "^6.3.5"
+  }
+}
diff --git a/examples/external-url-demo/src/App.css b/examples/external-url-demo/src/App.css
new file mode 100644
index 00000000..6b80dc6d
--- /dev/null
+++ b/examples/external-url-demo/src/App.css
@@ -0,0 +1,43 @@
+body {
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+  max-width: 1200px;
+  margin: 0 auto;
+  padding: 2rem;
+  line-height: 1.6;
+}
+.demo-section {
+  margin: 2rem 0;
+  padding: 1rem;
+  border: 1px solid #ddd;
+  border-radius: 8px;
+}
+.demo-section h2 {
+  margin-top: 0;
+  color: #333;
+}
+iframe {
+  width: 100%;
+  min-height: 400px;
+  border: 1px solid #ccc;
+  border-radius: 4px;
+}
+.code {
+  background: #f5f5f5;
+  padding: 1rem;
+  border-radius: 4px;
+  font-family: 'Courier New', monospace;
+  font-size: 0.9em;
+  margin: 1rem 0;
+}
+.toggle {
+  background: #007bff;
+  color: white;
+  border: none;
+  padding: 0.5rem 1rem;
+  border-radius: 4px;
+  cursor: pointer;
+  margin: 1rem 0;
+}
+.toggle:hover {
+  background: #0056b3;
+}
diff --git a/examples/external-url-demo/src/App.tsx b/examples/external-url-demo/src/App.tsx
new file mode 100644
index 00000000..a2d21de6
--- /dev/null
+++ b/examples/external-url-demo/src/App.tsx
@@ -0,0 +1,75 @@
+import { useState } from 'react';
+import './App.css';
+import { UIResourceRenderer } from '@mcp-ui/client';
+
+function App() {
+  const [useProxy, setUseProxy] = useState(false);
+  const resource = {
+    mimeType: 'text/uri-list',
+    text: 'https://example.com',
+  };
+  const proxy = 'https://proxy.mcpui.dev/';
+
+  return (
+    <div>
+      <h1>MCP-UI Proxy Demo</h1>
+      <p>This demo shows how the proxy functionality works for external URLs in MCP-UI.</p>
+      <p>
+        <strong>CSP Simulation:</strong> This page includes a Content Security Policy (
+        <code>frame-src 'self' https://proxy.mcpui.dev;</code>) that only allows iframes from this
+        origin and <code>https://proxy.mcpui.dev</code>. This demonstrates how the{' '}
+        <code>proxy</code> prop can be used to display external content on hosts with strict
+        security policies.
+      </p>
+      <p>
+        <code>proxy.mcpui.dev</code> hosts a simple script that renders the provided URL in a nested
+        iframe. Hosts can use this script or host their own to achieve the same result.
+      </p>
+
+      <div className="demo-section">
+        <h2>Direct URL (No Proxy)</h2>
+        <p>
+          This iframe attempts to load an external URL directly.{' '}
+          <strong>It should be blocked by the browser's Content Security Policy.</strong>
+        </p>
+        <div className="code">
+          Resource: {`{ mimeType: 'text/uri-list', text: 'https://example.com' }`}
+        </div>
+        <UIResourceRenderer resource={{ mimeType: 'text/uri-list', text: 'https://example.com' }} />
+      </div>
+
+      <div className="demo-section">
+        <h2>Proxied URL</h2>
+        <p>This iframe loads the external URL through the proxy:</p>
+        <div className="code">
+          Resource: {`{ mimeType: 'text/uri-list', text: 'https://example.com' }`}
+          <br />
+          Proxy: https://proxy.mcpui.dev/
+          <br />
+          Final URL: {`${proxy}?url=${encodeURIComponent(resource.text)}`}
+        </div>
+        <UIResourceRenderer
+          resource={resource}
+          htmlProps={{ proxy, style: { width: '500px', height: '500px' } }}
+        />
+      </div>
+
+      <div className="demo-section">
+        <h2>Interactive Demo</h2>
+        <p>Toggle between direct and proxied loading:</p>
+        <button className="toggle" onClick={() => setUseProxy(!useProxy)}>
+          Toggle Proxy
+        </button>
+        <div id="demo-container">
+          <UIResourceRenderer resource={resource} htmlProps={useProxy ? { proxy } : {}} />
+        </div>
+        <div className="code" id="url-display">
+          Current URL:{' '}
+          {useProxy ? `${proxy}?url=${encodeURIComponent(resource.text)}` : resource.text}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+export default App;
diff --git a/examples/external-url-demo/src/index.css b/examples/external-url-demo/src/index.css
new file mode 100644
index 00000000..99dd0500
--- /dev/null
+++ b/examples/external-url-demo/src/index.css
@@ -0,0 +1,12 @@
+body {
+  margin: 0;
+  font-family:
+    -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', 'Ubuntu', 'Cantarell',
+    'Fira Sans', 'Droid Sans', 'Helvetica Neue', sans-serif;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+code {
+  font-family: source-code-pro, Menlo, Monaco, Consolas, 'Courier New', monospace;
+}
diff --git a/examples/external-url-demo/src/main.tsx b/examples/external-url-demo/src/main.tsx
new file mode 100644
index 00000000..9bb419d3
--- /dev/null
+++ b/examples/external-url-demo/src/main.tsx
@@ -0,0 +1,10 @@
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+import App from './App.tsx';
+import './index.css';
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>,
+);
diff --git a/examples/external-url-demo/tsconfig.app.json b/examples/external-url-demo/tsconfig.app.json
new file mode 100644
index 00000000..0a68247e
--- /dev/null
+++ b/examples/external-url-demo/tsconfig.app.json
@@ -0,0 +1,25 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "ES2020",
+    "useDefineForClassFields": true,
+    "lib": ["ES2020", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"]
+}
diff --git a/examples/external-url-demo/tsconfig.json b/examples/external-url-demo/tsconfig.json
new file mode 100644
index 00000000..d32ff682
--- /dev/null
+++ b/examples/external-url-demo/tsconfig.json
@@ -0,0 +1,4 @@
+{
+  "files": [],
+  "references": [{ "path": "./tsconfig.app.json" }, { "path": "./tsconfig.node.json" }]
+}
diff --git a/examples/external-url-demo/tsconfig.node.json b/examples/external-url-demo/tsconfig.node.json
new file mode 100644
index 00000000..97ede7ee
--- /dev/null
+++ b/examples/external-url-demo/tsconfig.node.json
@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "composite": true,
+    "skipLibCheck": true,
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "allowSyntheticDefaultImports": true,
+    "strict": true
+  },
+  "include": ["vite.config.ts"]
+}
diff --git a/examples/external-url-demo/vite.config.ts b/examples/external-url-demo/vite.config.ts
new file mode 100644
index 00000000..627a3196
--- /dev/null
+++ b/examples/external-url-demo/vite.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from 'vite';
+import react from '@vitejs/plugin-react';
+
+// https://vitejs.dev/config/
+export default defineConfig({
+  plugins: [react()],
+});
diff --git a/packages/client/scripts/proxy/index.html b/packages/client/scripts/proxy/index.html
new file mode 100644
index 00000000..1e40ae0b
--- /dev/null
+++ b/packages/client/scripts/proxy/index.html
@@ -0,0 +1,56 @@
+<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <title>MCP-UI Proxy</title>
+    <style>
+      html,
+      body {
+        margin: 0;
+        height: 100vh;
+        width: 100vw;
+      }
+      body {
+        display: flex;
+        flex-direction: column;
+      }
+      * {
+        box-sizing: border-box;
+      }
+      iframe {
+        background-color: transparent;
+        border: 0px none transparent;
+        padding: 0px;
+        overflow: hidden;
+        flex-grow: 1;
+      }
+    </style>
+  </head>
+  <body>
+    <script>
+      const target = new URLSearchParams(location.search).get('url');
+
+      // Validate that the URL is a valid HTTP or HTTPS URL
+      function isValidHttpUrl(string) {
+        try {
+          const url = new URL(string);
+          return url.protocol === 'http:' || url.protocol === 'https:';
+        } catch (_) {
+          return false;
+        }
+      }
+
+      if (!target) {
+        document.body.textContent = 'Error: missing url parameter';
+      } else if (!isValidHttpUrl(target)) {
+        document.body.textContent = 'Error: invalid URL. Only HTTP and HTTPS URLs are allowed.';
+      } else {
+        const inner = document.createElement('iframe');
+        inner.src = target;
+        inner.style = 'width:100%; height:100%; border:none;';
+        inner.sandbox = 'allow-same-origin allow-scripts';
+        document.body.appendChild(inner);
+      }
+    </script>
+  </body>
+</html>
diff --git a/packages/client/src/components/HTMLResourceRenderer.tsx b/packages/client/src/components/HTMLResourceRenderer.tsx
index e68846e1..0a2e7d38 100644
--- a/packages/client/src/components/HTMLResourceRenderer.tsx
+++ b/packages/client/src/components/HTMLResourceRenderer.tsx
@@ -7,6 +7,7 @@ export type HTMLResourceRendererProps = {
   resource: Partial<Resource>;
   onUIAction?: (result: UIActionResult) => Promise<unknown>;
   style?: React.CSSProperties;
+  proxy?: string;
   iframeProps?: Omit<React.HTMLAttributes<HTMLIFrameElement>, 'src' | 'srcDoc' | 'style'> & {
     ref?: React.RefObject<HTMLIFrameElement>;
   };
@@ -16,14 +17,15 @@ export const HTMLResourceRenderer = ({
   resource,
   onUIAction,
   style,
+  proxy,
   iframeProps,
 }: HTMLResourceRendererProps) => {
   const iframeRef = useRef<HTMLIFrameElement | null>(null);
   useImperativeHandle(iframeProps?.ref, () => iframeRef.current as HTMLIFrameElement);
 
   const { error, iframeSrc, iframeRenderMode, htmlString } = useMemo(
-    () => processHTMLResource(resource),
-    [resource],
+    () => processHTMLResource(resource, proxy),
+    [resource, proxy],
   );
 
   useEffect(() => {
diff --git a/packages/client/src/components/UIResourceRenderer.tsx b/packages/client/src/components/UIResourceRenderer.tsx
index f2e3ff0a..5de26023 100644
--- a/packages/client/src/components/UIResourceRenderer.tsx
+++ b/packages/client/src/components/UIResourceRenderer.tsx
@@ -37,7 +37,13 @@ export const UIResourceRenderer = (props: UIResourceRendererProps) => {
   }
 
   switch (contentType) {
-    case 'rawHtml':
+    case 'rawHtml': {
+      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      const { proxy, ...otherHtmlProps } = htmlProps || {};
+      return (
+        <HTMLResourceRenderer resource={resource} onUIAction={onUIAction} {...otherHtmlProps} />
+      );
+    }
     case 'externalUrl': {
       return <HTMLResourceRenderer resource={resource} onUIAction={onUIAction} {...htmlProps} />;
     }
diff --git a/packages/client/src/components/__tests__/HTMLResourceRenderer.test.tsx b/packages/client/src/components/__tests__/HTMLResourceRenderer.test.tsx
index 3133ed01..668e656d 100644
--- a/packages/client/src/components/__tests__/HTMLResourceRenderer.test.tsx
+++ b/packages/client/src/components/__tests__/HTMLResourceRenderer.test.tsx
@@ -291,7 +291,9 @@ describe('HTMLResource iframe communication', () => {
 
   it('should pass ref to iframe', () => {
     const ref = React.createRef<HTMLIFrameElement>();
-    render(<HTMLResourceRenderer resource={mockResourceBaseForUIActionTests} iframeProps={{ ref }} />);
+    render(
+      <HTMLResourceRenderer resource={mockResourceBaseForUIActionTests} iframeProps={{ ref }} />,
+    );
     expect(ref.current).toBeInTheDocument();
   });
 
diff --git a/packages/client/src/components/__tests__/UIResourceRenderer.test.tsx b/packages/client/src/components/__tests__/UIResourceRenderer.test.tsx
index 05e34afe..ed96f63f 100644
--- a/packages/client/src/components/__tests__/UIResourceRenderer.test.tsx
+++ b/packages/client/src/components/__tests__/UIResourceRenderer.test.tsx
@@ -77,4 +77,25 @@ describe('<UIResourceRenderer />', () => {
     expect(RemoteDOMResourceRenderer).not.toHaveBeenCalled();
     expect(HTMLResourceRenderer).toHaveBeenCalledWith({ resource }, {});
   });
+
+  it('should pass proxy prop to HTMLResourceRenderer for external URLs', () => {
+    const resource = { ...baseResource, mimeType: 'text/uri-list' };
+    render(
+      <UIResourceRenderer resource={resource} htmlProps={{ proxy: 'https://proxy.mcpui.dev/' }} />,
+    );
+    expect(screen.getByTestId('html-resource')).toBeInTheDocument();
+    expect(HTMLResourceRenderer).toHaveBeenCalledWith(
+      { resource, proxy: 'https://proxy.mcpui.dev/' },
+      {},
+    );
+  });
+
+  it('should not pass proxy prop to HTMLResourceRenderer for HTML content', () => {
+    const resource = { ...baseResource, mimeType: 'text/html' };
+    render(
+      <UIResourceRenderer resource={resource} htmlProps={{ proxy: 'https://proxy.mcpui.dev/' }} />,
+    );
+    expect(screen.getByTestId('html-resource')).toBeInTheDocument();
+    expect(HTMLResourceRenderer).toHaveBeenCalledWith({ resource }, {});
+  });
 });
diff --git a/packages/client/src/utils/__tests__/processResource.test.ts b/packages/client/src/utils/__tests__/processResource.test.ts
index c2546478..ff096c9f 100644
--- a/packages/client/src/utils/__tests__/processResource.test.ts
+++ b/packages/client/src/utils/__tests__/processResource.test.ts
@@ -71,4 +71,59 @@ describe('text/uri-list', () => {
     const result = processHTMLResource(resource);
     expect(result.error).toBe('No valid URLs found in uri-list content.');
   });
-}); 
\ No newline at end of file
+
+  it('should use proxy when provided for external URLs', () => {
+    const resource = {
+      mimeType: 'text/uri-list',
+      text: 'https://example.com',
+    };
+    const result = processHTMLResource(resource, 'https://proxy.mcpui.dev/');
+    expect(result.error).toBeUndefined();
+    expect(result.iframeSrc).toBe('https://proxy.mcpui.dev/?url=https%3A%2F%2Fexample.com');
+    expect(result.iframeRenderMode).toBe('src');
+  });
+
+  it('should handle proxy with existing query parameters', () => {
+    const resource = {
+      mimeType: 'text/uri-list',
+      text: 'https://example.com',
+    };
+    const result = processHTMLResource(resource, 'https://proxy.mcpui.dev/?a=1&b=2');
+    expect(result.error).toBeUndefined();
+    expect(result.iframeSrc).toBe('https://proxy.mcpui.dev/?a=1&b=2&url=https%3A%2F%2Fexample.com');
+    expect(result.iframeRenderMode).toBe('src');
+  });
+
+  it('should fallback to direct URL if proxy is invalid', () => {
+    const resource = {
+      mimeType: 'text/uri-list',
+      text: 'https://example.com',
+    };
+    const result = processHTMLResource(resource, 'not-a-valid-url');
+    expect(result.error).toBeUndefined();
+    expect(result.iframeSrc).toBe('https://example.com');
+    expect(result.iframeRenderMode).toBe('src');
+  });
+
+  it('should not use proxy when proxy is empty string', () => {
+    const resource = {
+      mimeType: 'text/uri-list',
+      text: 'https://example.com',
+    };
+    const result = processHTMLResource(resource, '');
+    expect(result.error).toBeUndefined();
+    expect(result.iframeSrc).toBe('https://example.com');
+    expect(result.iframeRenderMode).toBe('src');
+  });
+
+  it('should not use proxy when proxy is not provided', () => {
+    const resource = {
+      mimeType: 'text/uri-list',
+      text: 'https://example.com',
+    };
+    const result = processHTMLResource(resource);
+    expect(result.error).toBeUndefined();
+    expect(result.iframeSrc).toBe('https://example.com');
+    expect(result.iframeRenderMode).toBe('src');
+  });
+});
diff --git a/packages/client/src/utils/processResource.ts b/packages/client/src/utils/processResource.ts
index 9013411f..7fba442b 100644
--- a/packages/client/src/utils/processResource.ts
+++ b/packages/client/src/utils/processResource.ts
@@ -18,7 +18,10 @@ function isValidHttpUrl(string: string): boolean {
   return url.protocol === 'http:' || url.protocol === 'https:';
 }
 
-export function processHTMLResource(resource: Partial<Resource>): ProcessResourceResult {
+export function processHTMLResource(
+  resource: Partial<Resource>,
+  proxy?: string,
+): ProcessResourceResult {
   if (resource.mimeType !== 'text/html' && resource.mimeType !== 'text/uri-list') {
     return {
       error:
@@ -77,8 +80,33 @@ export function processHTMLResource(resource: Partial<Resource>): ProcessResourc
       );
     }
 
+    const originalUrl = lines[0];
+
+    if (proxy && proxy.trim() !== '') {
+      try {
+        const proxyUrl = new URL(proxy);
+        // The proxy host MUST NOT be the host URL, or the proxy can escape the sandbox
+        if (typeof window !== 'undefined' && proxyUrl.host === window.location.host) {
+          console.error(
+            'For security, the proxy origin must not be the same as the host origin. Using original URL instead.',
+          );
+        } else {
+          proxyUrl.searchParams.set('url', originalUrl);
+          return {
+            iframeSrc: proxyUrl.toString(),
+            iframeRenderMode: 'src',
+          };
+        }
+      } catch (e: unknown) {
+        console.error(
+          `Invalid proxy URL provided: "${proxy}". Falling back to direct URL.`,
+          e instanceof Error ? e.message : String(e),
+        );
+      }
+    }
+
     return {
-      iframeSrc: lines[0],
+      iframeSrc: originalUrl,
       iframeRenderMode: 'src',
     };
   } else if (resource.mimeType === 'text/html') {
diff --git a/packages/server/src/index.ts b/packages/server/src/index.ts
index fb821e63..948bf93f 100644
--- a/packages/server/src/index.ts
+++ b/packages/server/src/index.ts
@@ -70,7 +70,9 @@ export function createUIResource(options: CreateUIResourceOptions): UIResource {
     mimeType = 'text/html';
   } else if (options.content.type === 'externalUrl') {
     if (!options.uri.startsWith('ui://')) {
-      throw new Error("MCP-UI SDK: URI must start with 'ui://' when content.type is 'externalUrl'.");
+      throw new Error(
+        "MCP-UI SDK: URI must start with 'ui://' when content.type is 'externalUrl'.",
+      );
     }
     actualContentString = options.content.iframeUrl;
     if (typeof actualContentString !== 'string') {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 12980d2f..7c68ad94 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -105,6 +105,49 @@ importers:
         specifier: ^1.0.4
         version: 1.6.1(@types/node@22.15.33)(jsdom@23.2.0)(lightningcss@1.30.1)
 
+  examples/external-url-demo:
+    dependencies:
+      '@mcp-ui/client':
+        specifier: workspace:*
+        version: link:../../packages/client
+      react:
+        specifier: ^18.3.1
+        version: 18.3.1
+      react-dom:
+        specifier: ^18.3.1
+        version: 18.3.1(react@18.3.1)
+    devDependencies:
+      '@types/react':
+        specifier: ^18.3.23
+        version: 18.3.23
+      '@types/react-dom':
+        specifier: ^18.3.7
+        version: 18.3.7(@types/react@18.3.23)
+      '@typescript-eslint/eslint-plugin':
+        specifier: ^7.18.0
+        version: 7.18.0(@typescript-eslint/parser@7.18.0(eslint@9.29.0(jiti@2.4.2))(typescript@5.8.3))(eslint@9.29.0(jiti@2.4.2))(typescript@5.8.3)
+      '@typescript-eslint/parser':
+        specifier: ^7.18.0
+        version: 7.18.0(eslint@9.29.0(jiti@2.4.2))(typescript@5.8.3)
+      '@vitejs/plugin-react':
+        specifier: ^4.6.0
+        version: 4.6.0(vite@6.3.5(@types/node@22.15.33)(jiti@2.4.2)(lightningcss@1.30.1))
+      eslint:
+        specifier: ^9.29.0
+        version: 9.29.0(jiti@2.4.2)
+      eslint-plugin-react-hooks:
+        specifier: ^5.2.0
+        version: 5.2.0(eslint@9.29.0(jiti@2.4.2))
+      eslint-plugin-react-refresh:
+        specifier: 0.4.7
+        version: 0.4.7(eslint@9.29.0(jiti@2.4.2))
+      typescript:
+        specifier: ~5.8.3
+        version: 5.8.3
+      vite:
+        specifier: ^6.3.5
+        version: 6.3.5(@types/node@22.15.33)(jiti@2.4.2)(lightningcss@1.30.1)
+
   examples/remote-dom-demo:
     dependencies:
       '@mcp-ui/client':
@@ -4010,6 +4053,11 @@ packages:
     peerDependencies:
       eslint: '>=8.40'
 
+  eslint-plugin-react-refresh@0.4.7:
+    resolution: {integrity: sha512-yrj+KInFmwuQS2UQcg1SF83ha1tuHC1jMQbRNyuWtlEzzKRDgAl7L4Yp4NlDUZTZNlWvHEzOtJhMi40R7JxcSw==}
+    peerDependencies:
+      eslint: '>=7'
+
   eslint-plugin-react@7.37.5:
     resolution: {integrity: sha512-Qteup0SqU15kdocexFNAJMvCJEfa2xUKNV4CC1xsVMrIIqEy3SQ/rqyxCWNzfrd3/ldy6HMlD2e0JDVpDg2qIA==}
     engines: {node: '>=4'}
@@ -11395,6 +11443,10 @@ snapshots:
     dependencies:
       eslint: 9.29.0(jiti@2.4.2)
 
+  eslint-plugin-react-refresh@0.4.7(eslint@9.29.0(jiti@2.4.2)):
+    dependencies:
+      eslint: 9.29.0(jiti@2.4.2)
+
   eslint-plugin-react@7.37.5(eslint@8.57.1):
     dependencies:
       array-includes: 3.1.9
