785 pages for edit.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Local Server Security
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/local-server-security
…ed first.** Assume users install servers the same way they install editor extensions. A workable starting posture: * **Define approved sources.** Publish a short allowlist of vetted servers (wi…
Security Best Practices
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/security_best_practices
…a the audience claim, as mentioned in [RFC9068](https://www.rfc-editor.org/rfc/rfc9068.html)), it may accept tokens originally issued for other services. This breaks a fundamental OAuth se…
Build an MCP client
Model Context Protocol · in the page
docs/draft/develop/build-client
…ypes for tool arguments * `BadRequestError`: Ensure you have enough credits to access the Anthropic API **Java** > [!NOTE] > > This is a quickstart demo based on Spring AI MCP auto-configuration and…
Build an MCP server
Model Context Protocol · in the page
docs/draft/develop/build-server
…rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst…
Connect to local MCP servers
Model Context Protocol · in the page
docs/draft/develop/connect-local-servers
…for configuring MCP servers and other developer features. Click the "Edit Config" button to open the configuration file: , before they become eligible for removal, after which…
CLI client
Model Context Protocol · in the page
docs/draft/tools/inspector/cli
…target or `--server-url` | Write the catalog without connecting (see [Editing the catalog](#editing-the-catalog)). | | `servers/edit` | `--server`, plus what to change | Same. | | `servers/remove` | `…
Configuration and flags
Model Context Protocol · in the page
docs/draft/tools/inspector/configuration
…P_CATALOG_PATH` environment variable. | None; you must pass it. | | **Editable in the web UI?** | Yes. | No. | | **Use it for** | Your own working set of servers. | A read-only session against someone…
mcpdo connection client
Model Context Protocol · in the page
docs/draft/tools/inspector/mcpdo
…ns/*` shows what the daemon currently holds. There are no commands to edit the catalog; edit the file directly. A stdio server runs with the working directory and command resolution of the shell that…
TUI client
Model Context Protocol · in the page
docs/draft/tools/inspector/tui
…and instructions, plus the roots the client advertises (press `e` to edit them). | | **Auth** | `a` | OAuth state for the selected HTTP or SSE server, plus a **Clear OAuth State** action (`s`), which…
Web client
Model Context Protocol · in the page
docs/draft/tools/inspector/web
…t does | | - | - | - | | **Servers** | Always | The server list: add, edit, import, connect, and open per-server settings. | | **Apps** | The server exposes MCP App tools | Renders a tool's UI in a sa…
Local Server Security
Model Context Protocol · in the page
docs/draft/tutorials/security/local-server-security
…ed first.** Assume users install servers the same way they install editor extensions. A workable starting posture: * **Define approved sources.** Publish a short allowlist of vetted servers (wi…
Security Best Practices
Model Context Protocol · in the page
docs/draft/tutorials/security/security_best_practices
…a the audience claim, as mentioned in [RFC9068](https://www.rfc-editor.org/rfc/rfc9068.html)), it may accept tokens originally issued for other services. This breaks a fundamental OAuth se…
Quickstart: Publish an MCP Server to the MCP Registry
Model Context Protocol · in the page
registry/quickstart
…t . rm -rf quickstart-resources cd weather-server-typescript ``` And edit `package.json` to reflect your information: ```diff package.json theme={null} { - "name": "mcp-quickstart-ts", - "version…
SEP-1577: Sampling With Tools
Model Context Protocol · in the page
seps/1577--sampling-with-tools
…cs.google.com/document/d/1KUsloHpsjR4fdXdJuofb9jUuK0XWi88clbRm9sWE510/edit?tab=t.0#heading=h.edw7oyac2e87)): it makes it particularly tricky to fully implement sampling, which along with other precaut…
SEP-1850: PR-Based SEP Workflow
Model Context Protocol · in the page
seps/1850-pr-based-sep-workflow
…: Maintaining long-form specifications in issue bodies made iterative edits and multi-contributor collaboration harder. * **Limited version control**: GitHub issues don't provide the same version cont…
SEP-2133: Extensions
Model Context Protocol · in the page
seps/2133-extensions
…e language as the core specification (i.e. \[[BCP 14](https://www.rfc-editor.org/info/bcp14)] \[[RFC2119](https://datatracker.ietf.org/doc/html/rfc2119)] \[[RFC8174](https://datatracker.ietf.org/doc/h…
SEP-2567: Sessionless MCP via Explicit State Handles
Model Context Protocol · in the page
seps/2567-sessionless-mcp
…d description rather than in the list result. ### Consequential spec edits Beyond removing the §Session Management section itself, several other places in the current spec define behavior in terms o…
SEP-2596: Specification Feature Lifecycle and Deprecation Policy
Model Context Protocol · in the page
seps/2596-spec-feature-lifecycle-and-deprecation
…or removal, for example extending or shortening the timeline ([Expedited removal](#expedited-removal)) or restoring the feature to Active ([Feature states](#feature-states)). Note that feature…
SEP-991: Enable URL-based Client Registration using OAuth Client ID Metadata Documents
Model Context Protocol · in the page
seps/991-enable-url-based-client-registration-using-oauth-c
…* [RFC 7591 - OAuth 2.0 Dynamic Client Registration](https://www.rfc-editor.org/rfc/rfc7591.html) * [MCP Specification - Authorization](https://modelcontextprotocol.org/docs/spec/authorization) * [Ev…
Sampling
Model Context Protocol · in the page
specification/2024-11-05/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Capabilities Clients that support samp…
Sampling
Model Context Protocol · in the page
specification/2025-03-26/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Capabilities Clients that support samp…
Authorization
Model Context Protocol · in the page
specification/2025-06-18/basic/authorization
…rce Indicators for OAuth 2.0 as defined in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to explicitly specify the target resource for which the token is being requested. The `resource` para…
Key Changes
Model Context Protocol · in the page
specification/2025-06-18/changelog
…lement Resource Indicators as described in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to prevent malicious servers from obtaining access tokens. (PR [#734](https://github.com/modelc…
Sampling
Model Context Protocol · in the page
specification/2025-06-18/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Capabilities Clients that support samp…
Authorization
Model Context Protocol · in the page
specification/2025-11-25/basic/authorization
…rce Indicators for OAuth 2.0 as defined in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to explicitly specify the target resource for which the token is being requested. The `resource` para…
Sampling
Model Context Protocol · in the page
specification/2025-11-25/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Tools in Sampling Servers can request…
Authorization
Model Context Protocol · in the page
specification/2026-07-28/basic/authorization/index
…91)) * Resource Indicators for OAuth 2.0 ([RFC8707](https://www.rfc-editor.org/rfc/rfc8707.html)) * OAuth 2.0 Protected Resource Metadata ([RFC9728](https://datatracker.ietf.org/doc/html/rfc9728)) *…
Authorization Security Considerations
Model Context Protocol · in the page
specification/2026-07-28/basic/authorization/security-considerations
…## Token Audience Binding and Validation [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) Resource Indicators provide critical security benefits by binding tokens to their intended audiences…
Streamable HTTP
Model Context Protocol · in the page
specification/2026-07-28/basic/transports/streamable-http
…| Server MUST reject the request | [http-semantics]: https://www.rfc-editor.org/rfc/rfc9110.html#name-field-names ### Case Sensitivity Header names (called "field names" in [RFC 9110][rfc9110-names…
Sampling
Model Context Protocol · in the page
specification/2026-07-28/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Tools in Sampling Servers can request…
Authorization
Model Context Protocol · in the page
specification/draft/basic/authorization/index
…91)) * Resource Indicators for OAuth 2.0 ([RFC8707](https://www.rfc-editor.org/rfc/rfc8707.html)) * OAuth 2.0 Protected Resource Metadata ([RFC9728](https://datatracker.ietf.org/doc/html/rfc9728)) *…
Authorization Security Considerations
Model Context Protocol · in the page
specification/draft/basic/authorization/security-considerations
…## Token Audience Binding and Validation [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) Resource Indicators provide critical security benefits by binding tokens to their intended audiences…
Streamable HTTP
Model Context Protocol · in the page
specification/draft/basic/transports/streamable-http
…| Server MUST reject the request | [http-semantics]: https://www.rfc-editor.org/rfc/rfc9110.html#name-field-names ### Case Sensitivity Header names (called "field names" in [RFC 9110][rfc9110-names…
Sampling
Model Context Protocol · in the page
specification/draft/client/sampling
…and intuitive to review sampling requests > * Allow users to view and edit prompts before sending > * Present generated responses for review before delivery ## Tools in Sampling Servers can request…