As long as SearXNG has access to the internet, the MCP server allows for remote access to the web. You can firewall your LLM and only allow it access to SearXNG if you want, and it'll still work. Just ...
Microsoft removes local-only Windows setup in latest Insider Preview, but an age check trick could help you out.