1,027 pages for path.

Understanding Authorization in MCP Model Context Protocol · in the page docs/draft/tutorials/security/authorization …728). The document is hosted by the MCP server, follows a predictable path pattern, and is provided to the client in the `resource_metadata` parameter within the `WWW-Authenticate` header. ```http th… Local Server Security Model Context Protocol · in the page docs/draft/tutorials/security/local-server-security …ships only as a stdio process, ask why. It may just be the author's path of least resistance, but it is also exactly how a malicious or overcollecting server gets onto your machine. * **Keep the g… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …MCP servers as child processes, it can provide a critical escalation path from web-based attacks to full system compromise. #### Attack Description **Important**: This attack vector only applies to… Example Servers Model Context Protocol · in the page examples …"-y", "@modelcontextprotocol/server-filesystem", "/path/to/allowed/files" ] }, "github": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-g… Build an MCP App Model Context Protocol · in the page extensions/apps/build …`powershell Windows theme={null} New-Item -ItemType Directory -Force -Path .claude\skills | Out-Null; Copy-Item -Recurse ext-apps\plugins\mcp-apps\skills\create-mcp-app .claude\skills\create-mcp-app `… OAuth Client Credentials Model Context Protocol · in the page extensions/auth/oauth-client-credentials ….close(); ``` **Python** ```python theme={null} import asyncio from pathlib import Path import httpx2 from mcp import Client from mcp.client.auth.extensions.client_credentials import ( Private… Extensions Overview Model Context Protocol · in the page extensions/overview …xperimental Extensions Experimental extensions provide an incubation pathway for [Working Groups and Interest Groups](/community/working-interest-groups.md) to prototype ideas and collaborate on exte… Skills Model Context Protocol · in the page extensions/skills/overview …To load the skill, the host routes the read through its skill-loading path, which verifies the content and applies any required user approval before loading it into model context. ## Capabilities Se… MCP Registry Supported Package Types Model Context Protocol · in the page registry/package-types …npm/PyPI/NuGet. `cargo install <crate>` places the compiled binary on PATH at `~/.cargo/bin`, after which MCP clients invoke it directly by name. There is no per-invocation runner equivalent to `npx`… Quickstart: Publish an MCP Server to the MCP Registry Model Context Protocol · in the page registry/quickstart …mcp-publisher.tar.gz # Move mcp-publisher.exe to a directory in your PATH ``` ```bash theme={null} brew install mcp-publisher ``` Verify that `mcp-publisher` is correctly installed by running: ```… MCP Registry Aggregators Model Context Protocol · in the page registry/registry-aggregators …atest` to get the latest version of the server. > [!WARNING] > > URL path parameters such as `serverName` and `version` **must** be URL-encoded. For example, `io.modelcontextprotocol/everything` must… SEP-1024: MCP Client Security Requirements for Local Server Installation Model Context Protocol · in the page seps/1024-mcp-client-security-requirements-for-local-server- …Users will see consent dialogs where none existed before **Migration Path:** 1. MCP clients can implement these changes in new versions without breaking existing functionality 2. Existing installed… SEP-1036: URL Mode Elicitation for secure out-of-band interactions Model Context Protocol · in the page seps/1036-url-mode-elicitation-for-secure-out-of-band-intera …now include a `mode` parameter (`"form"` or `"url"`). ### Migration Path To ease migration: * Servers SHOULD check client capabilities before sending mode-specific requests * Clients MAY initially… SEP-1302: Formalize Working Groups and Interest Groups in MCP Governance Model Context Protocol · in the page seps/1302-formalize-working-groups-and-interest-groups-in-mc …#### Alignment with current status quo There is a clear "migration" path for the existing "CWG" working groups and Steering working groups - just a matter of sorting out what is "working" vs. "inter… SEP-1319: Decouple Request Payload from RPC Methods Definition Model Context Protocol · in the page seps/1319-decouple-request-payload-from-rpc-methods-definiti …from the RPC method—was chosen as the most direct and non-disruptive path to achieving the goals outlined in the motivation. This approach establishes a clear architectural boundary between two dist… SEP-1613: Establish JSON Schema 2020-12 as Default Dialect for MCP Model Context Protocol · in the page seps/1613-establish-json-schema-2020-12-as-default-dialect-f …as of 2025 ### Why allow explicit declaration? * Supports migration paths for existing schemas * Provides flexibility without protocol changes * Follows JSON Schema best practices ### Alternatives… SEP-1686: Tasks Model Context Protocol · in the page seps/1686-tasks …Receivers **MUST** only transition tasks through the following valid paths: 1. From `submitted`: may move to `working`, `input_required`, `completed`, `failed`, `cancelled`, or `unknown` 2. Fro… SEP-1730: SDKs Tiering System Model Context Protocol · in the page seps/1730-sdks-tiering-system …have well supported, fully-featured SDK * **Tier 2** provides a clear pathway for improving SDKs * **Tier 3** allows experimentation without creating barriers to entry ### Why Time-Based Commitments?… SEP-1865: MCP Apps - Interactive User Interfaces for MCP Model Context Protocol · in the page seps/1865-mcp-apps-interactive-user-interfaces-for-mcp …focuses on HTML resources (`text/html;profile=mcp-app`) with a clear path for future extensions. ## Motivation MCP lacks a standardized way for servers to deliver rich, interactive user interfaces… SEP-2106: Tools `inputSchema` & `outputSchema` Conform to JSON Schema 2020-12 Model Context Protocol · in the page seps/2106-json-schema-2020-12 …nsumers do not need to write narrowing guards by hand. ### Migration Path * **Servers**: No migration is required to keep working as before. To use array or primitive `structuredContent`, also emit… SEP-2127: MCP Server Cards - HTTP Server Discovery Model Context Protocol · in the page seps/2127-mcp-server-cards …connect and start performing MCP operations. The canonical discovery path and the relationship to the broader [AI Catalog](https://github.com/Agent-Card/ai-catalog) are specified in the extension rep… SEP-2133: Extensions Model Context Protocol · in the page seps/2133-extensions …tained by MCP maintainers) and experimental extensions (an incubation pathway for Working Groups and Interest Groups to prototype and collaborate on extension ideas before formal acceptance). External… SEP-2148: MCP Contributor Ladder Model Context Protocol · in the page seps/2148-contributor-ladder …contributor through Core Maintainer. The ladder provides transparent pathways for community members to understand how they can grow their involvement and influence within the project. This SEP is a… SEP-2149: MCP Group Governance and Charter Template Model Context Protocol · in the page seps/2149-working-group-charter-template …Member status on the ladder, and group participation is a recognized pathway to ladder advancement. ## Motivation Community interviews and feedback identified several challenges with the current gr… SEP-2164: Standardize Resource Not Found Error Code Model Context Protocol · in the page seps/2164-resource-not-found-error …multiple error codes or treats all errors generically. ### Migration Path 1. SDKs should update their resource-not-found error code to `-32602` 2. During the transition, clients SHOULD handle both `… SEP-2207: OIDC-Flavored Refresh Token Guidance Model Context Protocol · in the page seps/2207-oidc-refresh-token-guidance …s explicitly requested. Supporting this pattern provides a compatible path for such deployments. Clients can detect Authorization Servers that support this convention by checking for `offline_access`… SEP-2243: HTTP Header Standardization for Streamable HTTP Transport Model Context Protocol · in the page seps/2243-http-standardization …error code `-32001` (`HeaderMismatch`). ## Rationale ### Headers vs Path This proposal mirrors request data into headers rather than encoding it in the URL path. **Advantages of Headers**: 1. **S… SEP-2484: Require Conformance Tests for Standards Track SEPs to Reach Final Status Model Context Protocol · in the page seps/2484-conformance-tests-required-for-final-seps …to resolve ambiguity rather than win an argument. The same escalation path is available to a sponsor if a scenario PR is blocked on non-technical grounds. ### Test stability and tiering SEP-1730 tie… SEP-2567: Sessionless MCP via Explicit State Handles Model Context Protocol · in the page seps/2567-sessionless-mcp …hosts that regularly spawn subagents, this is a multiplier on the hot path. The possibility that a server is session-scoped forces `O(subagents × servers)` calls to `tools/list`: every subagent, for e… SEP-2575: Make MCP Stateless Model Context Protocol · in the page seps/2575-stateless-mcp …requests inside an `IncompleteResult` returned from specific request paths (e.g., `CallTool`, `GetPrompt`, `ListResources`). The client satisfies the input requests and retries the original request.… SEP-2596: Specification Feature Lifecycle and Deprecation Policy Model Context Protocol · in the page seps/2596-spec-feature-lifecycle-and-deprecation …s that "removing from \[the spec] is nearly impossible" but offers no path for the cases where removal is warranted. The Core Maintainers agreed at the [April 1, 2026 meeting][cm-2026-04-01] that MCP… SEP-2640: Skills Extension Model Context Protocol · in the page seps/2640-skills-extension …own `skill://` URI structure, with diverging semantics for authority, path, and sub-resource addressing. ## Specification ### Dependencies This extension has no dependencies beyond the base MCP Res… SEP-2663: Tasks Extension Model Context Protocol · in the page seps/2663-tasks-extension …rve the resulting state. That conflation has costs: it makes the read path non-idempotent (a retried `tasks/get` could re-submit responses), it forces the read path to share the eventual-consistency m… SEP-932: Model Context Protocol Governance Model Context Protocol · in the page seps/932-model-context-protocol-governance …ve no clear visibility into how decisions are made 2. **Participation Pathways**: Contributors lack defined ways to influence project direction 3. **Accountability**: No formal structure exists for re… SEP-985: Align OAuth 2.0 Protected Resource Metadata with RFC 9728 Model Context Protocol · in the page seps/985-align-oauth-20-protected-resource-metadata-with-rf …option to discover metadata via a well-known URL provides a practical path forward for easier MCP adoption. Requiring only the header would impose significant communication overhead between components… SEP-991: Enable URL-based Client Registration using OAuth Client ID Metadata Documents Model Context Protocol · in the page seps/991-enable-url-based-client-registration-using-oauth-c …quirements * The client\_id URL MUST use "https" scheme and contain a path component * Metadata documents MUST be valid JSON and include at minimum: * `client_id`: matching the document URL exactly… Roots Model Context Protocol · in the page specification/2024-11-05/client/roots …s with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessibility 2. Servers **SHOULD**: * Handle cases whe… Specification Model Context Protocol · in the page specification/2024-11-05/index …owerful capabilities through arbitrary data access and code execution paths. With this power comes important security and trust considerations that all implementors must carefully address. ### Key Pr… Resources Model Context Protocol · in the page specification/2024-11-05/server/resources …{ "resourceTemplates": [ { "uriTemplate": "file:///{path}", "name": "Project Files", "description": "Access files in the project directory", "mimeType": "appl… Completion Model Context Protocol · in the page specification/2024-11-05/server/utilities/completion …eferences a resource URI | `{"type": "ref/resource", "uri": "file:///{path}"}` | ### Completion Results Servers return an array of completion values ranked by relevance, with: * Maximum 100 items p… Authorization Model Context Protocol · in the page specification/2025-03-26/basic/authorization …T** be determined from the MCP server URL by discarding any existing `path` component. For example: If the MCP server URL is `https://api.example.com/v1/mcp`, then: * The authorization base URL is `… Transports Model Context Protocol · in the page specification/2025-03-26/basic/transports …ons and requests. The server **MUST** provide a single HTTP endpoint path (hereafter referred to as the **MCP endpoint**) that supports both POST and GET methods. For example, this could be a URL lik… Roots Model Context Protocol · in the page specification/2025-03-26/client/roots …s with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessibility 2. Servers **SHOULD**: * Handle cases whe… Specification Model Context Protocol · in the page specification/2025-03-26/index …owerful capabilities through arbitrary data access and code execution paths. With this power comes important security and trust considerations that all implementors must carefully address. ### Key Pr… Resources Model Context Protocol · in the page specification/2025-03-26/server/resources …{ "resourceTemplates": [ { "uriTemplate": "file:///{path}", "name": "Project Files", "description": "Access files in the project directory", "mimeType": "appl… Completion Model Context Protocol · in the page specification/2025-03-26/server/utilities/completion …eferences a resource URI | `{"type": "ref/resource", "uri": "file:///{path}"}` | ### Completion Results Servers return an array of completion values ranked by relevance, with: * Maximum 100 items p… Authorization Model Context Protocol · in the page specification/2025-06-18/basic/authorization …://mcp.example.com:8443` * `https://mcp.example.com/server/mcp` (when path component is necessary to identify individual MCP server) Examples of invalid canonical URIs: * `mcp.example.com` (missing… Transports Model Context Protocol · in the page specification/2025-06-18/basic/transports …ons and requests. The server **MUST** provide a single HTTP endpoint path (hereafter referred to as the **MCP endpoint**) that supports both POST and GET methods. For example, this could be a URL lik… Roots Model Context Protocol · in the page specification/2025-06-18/client/roots …s with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessibility 2. Servers **SHOULD**: * Handle cases whe… Specification Model Context Protocol · in the page specification/2025-06-18/index …owerful capabilities through arbitrary data access and code execution paths. With this power comes important security and trust considerations that all implementors must carefully address. ### Key Pr…