Follow Discord
Sweep 10 Nov 2026 · 02:18Z Build v2.1.322 539 read Stable v2.1.311 Latest v2.1.322 Next v2.1.322 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeDocsModel Context Protocol 9 Nov 2026
One change · mcp

Security Best Practices changeddocs/draft/tutorials/security/security_best_practices

Nearest release: v2.1.321, published 16 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.

Upstream edited this page at 9 Nov 2026 03:02 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 9 Nov 2026 03:07 UTC.

Upstream edited
Recorded here
Lines+3added
Lines−3removed
From line 494 where the diff opens
First seen 26 Aug 2026 this site's first read of the page
Recorded edits6to this page, all time

The whole hunk

from line 494, old and new numbered
/
lines
from line 494
494494The mitigations described above, such as blocking private IP ranges
495495and using egress proxies, apply equally to authorization servers
496496fetching client metadata documents. See
497[Server Side Request Forgery (SSRF) Attacks](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-00#name-server-side-request-forgery)
497[Server Side Request Forgery (SSRF) Attacks](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-03#name-server-side-request-forgery)
498498in the Client ID Metadata Document specification for further
499499guidance.
500500 
from line 865
865865Servers maintain full control over their access policies. See
866866[Trust Policies](https://modelcontextprotocol.io/specification/draft/basic/authorization/security-considerations.md#trust-policies)
867867in the authorization specification, along with
868[Section 6.4](https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-00.html#section-6.4)
868[Section 10.6](https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-03.html#section-10.6)
869869and
870[Section 6.8](https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-00.html#section-6.8)
870[Section 10.8](https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-03.html#section-10.8)
871871of the Client ID Metadata Document specification, for more details.
872872 
873873### Scope Minimization
Feedback