As long as SearXNG has access to the internet, the MCP server allows for remote access to the web. You can firewall your LLM and only allow it access to SearXNG if you want, and it'll still work. Just ...
If you use SSH on your MacOS device, then you should know there is a built-in SSH connection manager that is easy to call up and use.