581 pages for credentials.

Infrastructure Charter Model Context Protocol · in the page community/working-groups/infrastructure …DNS, and certificates. * **Supporting resources:** Compute, storage, credentials, and other infrastructure MCP needs now or adopts later. * **Maintenance:** Monitoring, upgrades, recovery, ownership… Client Best Practices Model Context Protocol · in the page docs/2024-11-05/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Debugging Model Context Protocol · in the page docs/2024-11-05/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Understanding Authorization in MCP Model Context Protocol · in the page docs/2024-11-05/tutorials/security/authorization …/2024-11-05/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Security Best Practices Model Context Protocol · in the page docs/2024-11-05/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Client Best Practices Model Context Protocol · in the page docs/2025-03-26/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Debugging Model Context Protocol · in the page docs/2025-03-26/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-03-26/tutorials/security/authorization …/2025-03-26/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Security Best Practices Model Context Protocol · in the page docs/2025-03-26/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Client Best Practices Model Context Protocol · in the page docs/2025-06-18/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Debugging Model Context Protocol · in the page docs/2025-06-18/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-06-18/tutorials/security/authorization …/2025-06-18/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Security Best Practices Model Context Protocol · in the page docs/2025-06-18/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Client Best Practices Model Context Protocol · in the page docs/2025-11-25/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Debugging Model Context Protocol · in the page docs/2025-11-25/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-11-25/tutorials/security/authorization …/2025-11-25/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Build an MCP client Model Context Protocol · in the page docs/2026-07-28/develop/build-client …er_args).await?; > > // Connecting and listing tools needs no credentials; querying them > // does. Matching the Python and TypeScript clients, report and exit > // rather than… Client Best Practices Model Context Protocol · in the page docs/2026-07-28/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Understanding MCP clients Model Context Protocol · in the page docs/2026-07-28/learn/client-concepts …ve information such as passwords, API keys, access tokens, or payment credentials. Those interactions belong in URL mode, which keeps the data out of band so it never passes through the client or the… Debugging Model Context Protocol · in the page docs/2026-07-28/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Authorization Model Context Protocol · in the page docs/2026-07-28/tools/inspector/authorization …rization server supports dynamic redirect-URI registration. ## Where credentials live | File | Contents | | - | - | | `~/.mcp-inspector/storage/oauth.json` | Non-secret OAuth state (discovery metada… CLI client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/cli …sensitive headers, > OAuth client secrets), but it does **not** scrub credentials embedded in a > server `url` (userinfo or query tokens) or in stdio `args`. Treat raw URL and > `detail` fields as sen… Configuration and flags Model Context Protocol · in the page docs/2026-07-28/tools/inspector/configuration …always persisted. | ## Where secrets are stored The Inspector keeps credentials out of `mcp.json`, `client.json` and `oauth.json`, so that sharing, committing or syncing those files does not leak th… mcpdo connection client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/mcpdo …d stdio child) is re-dialed transparently on next use with the stored credentials. Only an `auth_required` error needs you to run `connect` again. A connection runs **one call at a time**. Commands a… Security Model Context Protocol · in the page docs/2026-07-28/tools/inspector/security …d the mcpdo daemon The Inspector is a developer tool that holds real credentials and starts real processes. This page gathers everything it protects, what it trusts, and where the boundaries sit, so… Understanding Authorization in MCP Model Context Protocol · in the page docs/2026-07-28/tutorials/security/authorization …tion/latest/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Local Server Security Model Context Protocol · in the page docs/2026-07-28/tutorials/security/local-server-security …variables, can read anything your account can read — SSH keys, cloud credentials, browser profiles, your home directory — and can open outbound network connections to anywhere. None of that is govern… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Build an MCP client Model Context Protocol · in the page docs/draft/develop/build-client …er_args).await?; > > // Connecting and listing tools needs no credentials; querying them > // does. Matching the Python and TypeScript clients, report and exit > // rather than… Client Best Practices Model Context Protocol · in the page docs/draft/develop/clients/client-best-practices …call, and returns the result to the sandbox. Authorization tokens and credentials are held by the host and never exposed to the generated code. **The model** sees only what the sandbox returns, typic… Understanding MCP clients Model Context Protocol · in the page docs/draft/learn/client-concepts …ve information such as passwords, API keys, access tokens, or payment credentials. Those interactions belong in URL mode, which keeps the data out of band so it never passes through the client or the… Debugging Model Context Protocol · in the page docs/draft/tools/debugging …hen debugging: 1. **Sensitive Data** * Sanitize logs * Protect credentials * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor a… Authorization Model Context Protocol · in the page docs/draft/tools/inspector/authorization …rization server supports dynamic redirect-URI registration. ## Where credentials live | File | Contents | | - | - | | `~/.mcp-inspector/storage/oauth.json` | Non-secret OAuth state (discovery metada… CLI client Model Context Protocol · in the page docs/draft/tools/inspector/cli …sensitive headers, > OAuth client secrets), but it does **not** scrub credentials embedded in a > server `url` (userinfo or query tokens) or in stdio `args`. Treat raw URL and > `detail` fields as sen… Configuration and flags Model Context Protocol · in the page docs/draft/tools/inspector/configuration …always persisted. | ## Where secrets are stored The Inspector keeps credentials out of `mcp.json`, `client.json` and `oauth.json`, so that sharing, committing or syncing those files does not leak th… mcpdo connection client Model Context Protocol · in the page docs/draft/tools/inspector/mcpdo …d stdio child) is re-dialed transparently on next use with the stored credentials. Only an `auth_required` error needs you to run `connect` again. A connection runs **one call at a time**. Commands a… Security Model Context Protocol · in the page docs/draft/tools/inspector/security …d the mcpdo daemon The Inspector is a developer tool that holds real credentials and starts real processes. This page gathers everything it protects, what it trusts, and where the boundaries sit, so… Understanding Authorization in MCP Model Context Protocol · in the page docs/draft/tutorials/security/authorization …tion/latest/basic/transports.md#stdio), you can use environment-based credentials or credentials provided by third-party libraries embedded directly in the MCP server instead. Because a STDIO-built MC… Local Server Security Model Context Protocol · in the page docs/draft/tutorials/security/local-server-security …variables, can read anything your account can read — SSH keys, cloud credentials, browser profiles, your home directory — and can open outbound network connections to anywhere. None of that is govern… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …254.169.254/` (AWS/GCP/Azure metadata service) can exfiltrate cloud credentials and instance information * **Localhost services**: URLs like `http://localhost:6379/` can interact with local servic… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …ions. Employees authenticate with their corporate identity — the same credentials they use for email, Slack, and other work tools — and the IdP grants or denies MCP server access based on organization… Authorization Extensions Model Context Protocol · in the page extensions/auth/overview …address these gaps. ## Available extensions > [card] [OAuth Client Credentials](https://modelcontextprotocol.io/extensions/auth/oauth-client-credentials.md) > > Machine-to-machine authentication us… Extension Support Matrix Model Context Protocol · in the page extensions/client-matrix …HTML interfaces rendered inline in the conversation | | [OAuth Client Credentials](https://modelcontextprotocol.io/extensions/auth/oauth-client-credentials.md) | `io.modelcontextprotocol/oauth-client-… Extensions Overview Model Context Protocol · in the page extensions/overview …prefix}/{extension-name}`, e.g. `io.modelcontextprotocol/oauth-client-credentials`. Identifiers follow the same rules as [`_meta` keys](https://modelcontextprotocol.io/specification/draft/basic/index#… How to Authenticate When Publishing to the Official MCP Registry Model Context Protocol · in the page registry/authentication …yring="${MY_KEYRING}" --location=global # Enable Application Default Credentials (ADC) so the publisher tool can sign gcloud auth application-default login # Attempt login to show the public key mcp… SEP-1036: URL Mode Elicitation for secure out-of-band interactions Model Context Protocol · in the page seps/1036-url-mode-elicitation-for-secure-out-of-band-intera …cases that form mode elicitation cannot, such as gathering sensitive credentials, performing OAuth flows for external (3rd-party) authorization, and handling payments, *without* exposing sensitive da… SEP-2127: MCP Server Cards - HTTP Server Discovery Model Context Protocol · in the page seps/2127-mcp-server-cards …on disclosure**: Cards are public by design; servers MUST NOT include credentials, internal network topology, proprietary logic, or user/session-specific data. * **Primitive exclusion as a safety prop… SEP-2133: Extensions Model Context Protocol · in the page seps/2133-extensions …prefix}/{extension-name}`, e.g. `io.modelcontextprotocol/oauth-client-credentials` or `com.example/websocket-transport`. The names follow the same rules as the [\_meta keys](https://modelcontextprotoc… SEP-2567: Sessionless MCP via Explicit State Handles Model Context Protocol · in the page seps/2567-sessionless-mcp …clude varying the list by the authorization presented on the request: credentials are carried on each request, so a server returning different tool sets to different principals or scopes is relying on…