diff --git a/src/pages/docs/charts/fastmcp-server.mdx b/src/pages/docs/charts/fastmcp-server.mdx
index 6ce14e28..ffbdd622 100644
--- a/src/pages/docs/charts/fastmcp-server.mdx
+++ b/src/pages/docs/charts/fastmcp-server.mdx
@@ -164,6 +164,13 @@ ingress:
 
 networkPolicy:
   enabled: true
+  extraEgress:
+    - to:
+        - ipBlock:
+            cidr: 10.0.0.0/8
+      ports:
+        - protocol: TCP
+          port: 443
 
 resources:
   requests:
@@ -199,6 +206,23 @@ auth:
 
 When using JWT with NetworkPolicy or cluster egress controls, allow the JWKS endpoint.
 
+## Network Policy
+
+`networkPolicy.enabled=true` restricts inbound traffic to the MCP service port. Use `networkPolicy.extraEgress` when
+tools, S3/Git sources, JWT JWKS discovery, or package installation need outbound access to specific destinations.
+
+```yaml
+networkPolicy:
+  enabled: true
+  extraEgress:
+    - to:
+        - ipBlock:
+            cidr: 10.0.0.0/8
+      ports:
+        - protocol: TCP
+          port: 443
+```
+
 ## Gateway API
 
 Gateway API renders only an `HTTPRoute`; the Gateway itself is owned by the platform.
@@ -271,6 +295,7 @@ curl http://localhost:8000/mcp
 | `gatewayAPI.enabled`                          | `false`                              | Render an HTTPRoute.                             |
 | `ingress.enabled`                             | `false`                              | Render an Ingress.                               |
 | `networkPolicy.enabled`                       | `false`                              | Render a NetworkPolicy for the MCP port.         |
+| `networkPolicy.extraEgress`                   | `[]`                                 | Additional NetworkPolicy egress rules.           |
 | `autoscaling.enabled`                         | `false`                              | Render an HPA.                                   |
 | `pdb.enabled`                                 | `false`                              | Render a PodDisruptionBudget.                    |
 
diff --git a/src/pages/playground.astro b/src/pages/playground.astro
index 07b8fe5b..5bd16b23 100644
--- a/src/pages/playground.astro
+++ b/src/pages/playground.astro
@@ -24,6 +24,7 @@ const siteSyncPlaygroundConfigs: Record<string, string> = {
   'adguard-home': 'src/data/playground-configs.ts',
   booklore: 'src/data/playground-configs.ts',
   changedetection: 'src/data/playground-configs.ts',
+  'fastmcp-server': 'src/data/playground-configs.ts',
   medikeep: 'src/data/playground-configs.ts',
   memcached: 'src/data/playground-configs.ts',
   notediscovery: 'src/data/playground-configs.ts',