1,268 pages for auth.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
SEP-2243: HTTP Header Standardization for Streamable HTTP Transport
Model Context Protocol · in the page
seps/2243-http-standardization
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2243 | | **Title** | HTTP Header Standardization for Stream…
SEP-2260: Require Server requests to be associated with a Client request.
Model Context Protocol · in the page
seps/2260-Require-Server-requests-to-be-associated-with-Client-requests
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2260 | | **Title** | Require Server requests to be associat…
SEP-2322: Multi Round-Trip Requests
Model Context Protocol · in the page
seps/2322-MRTR
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2322 | | **Title** | Multi Round-Trip Requests | | **Status…
SEP-2484: Require Conformance Tests for Standards Track SEPs to Reach Final Status
Model Context Protocol · in the page
seps/2484-conformance-tests-required-for-final-seps
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2484 | | **Title** | Require Conformance Tests for Standard…
SEP-2549: TTL for List Results
Model Context Protocol · in the page
seps/2549-TTL-for-list-results
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2549 | | **Title** | TTL for List Results | | **Status** |…
SEP-2567: Sessionless MCP via Explicit State Handles
Model Context Protocol · in the page
seps/2567-sessionless-mcp
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2567 | | **Title** | Sessionless MCP via Explicit State Han…
SEP-2575: Make MCP Stateless
Model Context Protocol · in the page
seps/2575-stateless-mcp
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2575 | | **Title** | Make MCP Stateless | | **Status** | Fi…
SEP-2577: Deprecate Roots, Sampling, and Logging
Model Context Protocol · in the page
seps/2577-deprecate-roots-sampling-and-logging
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2577 | | **Title** | Deprecate Roots, Sampling, and Logging…
SEP-2596: Specification Feature Lifecycle and Deprecation Policy
Model Context Protocol · in the page
seps/2596-spec-feature-lifecycle-and-deprecation
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2596 | | **Title** | Specification Feature Lifecycle and De…
SEP-2640: Skills Extension
Model Context Protocol · in the page
seps/2640-skills-extension
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2640 | | **Title** | Skills Extension | | **Status** | Fina…
SEP-2663: Tasks Extension
Model Context Protocol · in the page
seps/2663-tasks-extension
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 2663 | | **Title** | Tasks Extension | | **Status** | Final…
SEP-3392: Extension Lifecycle
Model Context Protocol · in the page
seps/3392-extension-lifecycle
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 3392 | | **Title** | Extension Lifecycle | | **Status** | F…
SEP-3398: Release Cycle Updates
Model Context Protocol · in the page
seps/3398-release-cycle-updates
…cess | | **Created** | 2026-09-17 | | **Accepted** | 2026-10-14 | | **Author(s)** | Kurtis Van Gent ([@kurtisvg](https://github.com/kurtisvg)) | | **Sponsor** | Kurtis Van Gent ([@kurtisvg](https://gi…
SEP-414: Document OpenTelemetry Trace Context Propagation Conventions
Model Context Protocol · in the page
seps/414-request-meta
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 414 | | **Title** | Document OpenTelemetry Trace Context Pr…
SEP-932: Model Context Protocol Governance
Model Context Protocol · in the page
seps/932-model-context-protocol-governance
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 932 | | **Title** | Model Context Protocol Governance | | *…
SEP-973: Expose additional metadata for Implementations, Resources, Tools and Prompts
Model Context Protocol · in the page
seps/973-expose-additional-metadata-for-implementations-res
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 973 | | **Title** | Expose additional metadata for Implemen…
SEP-986: Specify Format for Tool Names
Model Context Protocol · in the page
seps/986-specify-format-for-tool-names
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 986 | | **Title** | Specify Format for Tool Names | | **Sta…
SEP-994: Shared Communication Practices/Guidelines
Model Context Protocol · in the page
seps/994-shared-communication-practicesguidelines
…odelcontextprotocol.io/specification/latest.md) and its changelog for authoritative > requirements. | Field | Value | | - | - | | **SEP** | 994 | | **Title** | Shared Communication Practices/Guidelin…
Specification Enhancement Proposals (SEPs)
Model Context Protocol · in the page
seps/index
…(https://modelcontextprotocol.io/seps/2468-recommend-issuer-claim-for-auth.md) | Recommend Issuer (iss) Parameter in MCP Auth Responses | Final | Standards Track | 2026-03-25 | | [SEP-2322](https://mo…
Architecture
Model Context Protocol · in the page
specification/2024-11-05/architecture/index
…* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E…
Overview
Model Context Protocol · in the page
specification/2024-11-05/basic/index
…elcontextprotocol.io/specification/2024-11-05/client/sampling.md) ## Auth Authentication and authorization are not currently part of the core MCP specification, but we are considering ways to introd…
Transports
Model Context Protocol · in the page
specification/2024-11-05/basic/transports
…l network interfaces (0.0.0.0) 3. Servers **SHOULD** implement proper authentication for all connections Without these protections, attackers could use DNS rebinding to interact with local MCP server…
Specification
Model Context Protocol · in the page
specification/2024-11-05/index
…nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi…
Prompts
Model Context Protocol · in the page
specification/2024-11-05/server/prompts
…idate all prompt inputs and outputs to prevent injection attacks or unauthorized access to resources.
Architecture
Model Context Protocol · in the page
specification/2025-03-26/architecture/index
…* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E…
Overview
Model Context Protocol · in the page
specification/2025-03-26/basic/index
…SON-RPC batches, but **MUST** support receiving JSON-RPC batches. ## Auth MCP provides an [Authorization](https://modelcontextprotocol.io/specification/2025-03-26/basic/authorization.md) framework f…
Transports
Model Context Protocol · in the page
specification/2025-03-26/basic/transports
…l network interfaces (0.0.0.0) 3. Servers **SHOULD** implement proper authentication for all connections Without these protections, attackers could use DNS rebinding to interact with local MCP server…
Key Changes
Model Context Protocol · in the page
specification/2025-03-26/changelog
…cation/2024-11-05.md). ## Major changes 1. Added a comprehensive **[authorization framework](https://modelcontextprotocol.io/specification/2025-03-26/basic/authorization.md)** based on OAuth 2.1…
Specification
Model Context Protocol · in the page
specification/2025-03-26/index
…nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi…
Prompts
Model Context Protocol · in the page
specification/2025-03-26/server/prompts
…idate all prompt inputs and outputs to prevent injection attacks or unauthorized access to resources.
Architecture
Model Context Protocol · in the page
specification/2025-06-18/architecture/index
…* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E…
Overview
Model Context Protocol · in the page
specification/2025-06-18/basic/index
…ion initialization, capability negotiation, and session control * **Authorization**: Authentication and authorization framework for HTTP-based transports * **Server Features**: Resources, prompts, a…
Transports
Model Context Protocol · in the page
specification/2025-06-18/basic/transports
…l network interfaces (0.0.0.0) 3. Servers **SHOULD** implement proper authentication for all connections Without these protections, attackers could use DNS rebinding to interact with local MCP server…
Key Changes
Model Context Protocol · in the page
specification/2025-06-18/changelog
…protocol/modelcontextprotocol/pull/371)) 3. Classify MCP servers as [OAuth Resource Servers](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization.md#authorization-server-discov…
Specification
Model Context Protocol · in the page
specification/2025-06-18/index
…nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi…
Prompts
Model Context Protocol · in the page
specification/2025-06-18/server/prompts
…idate all prompt inputs and outputs to prevent injection attacks or unauthorized access to resources.
Architecture
Model Context Protocol · in the page
specification/2025-11-25/architecture/index
…* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E…
Overview
Model Context Protocol · in the page
specification/2025-11-25/basic/index
…ion initialization, capability negotiation, and session control * **Authorization**: Authentication and authorization framework for HTTP-based transports * **Server Features**: Resources, prompts, a…
Transports
Model Context Protocol · in the page
specification/2025-11-25/basic/transports
…l network interfaces (0.0.0.0) 3. Servers **SHOULD** implement proper authentication for all connections Without these protections, attackers could use DNS rebinding to interact with local MCP server…
Tasks
Model Context Protocol · in the page
specification/2025-11-25/basic/utilities/tasks
…nsitive information or manipulate tasks they did not create. When an authorization context is provided, receivers **MUST** bind tasks to said context. Context-binding is not practical for all applic…
Key Changes
Model Context Protocol · in the page
specification/2025-11-25/changelog
…otocol.io/specification/2025-06-18.md). ## Major changes 1. Enhance authorization server discovery with support for [OpenID Connect Discovery 1.0](https://openid.net/specs/openid-connect-discovery-1…
Elicitation
Model Context Protocol · in the page
specification/2025-11-25/client/elicitation
…this context refers to secrets and credentials that grant access or > authorize transactions. General contact or profile information (such as a name, email address, > or username) is not categorically…
Specification
Model Context Protocol · in the page
specification/2025-11-25/index
…nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi…
Prompts
Model Context Protocol · in the page
specification/2025-11-25/server/prompts
…idate all prompt inputs and outputs to prevent injection attacks or unauthorized access to resources.
Architecture
Model Context Protocol · in the page
specification/2026-07-28/architecture/index
…* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E…
Overview
Model Context Protocol · in the page
specification/2026-07-28/basic/index
…ponse, multi round-trip requests (MRTR), and subscribe and notify * **Authorization**: Authentication and authorization framework for HTTP-based transports * **Server Features**: Resources, prompts, a…
Multi Round-Trip Requests
Model Context Protocol · in the page
specification/2026-07-28/basic/patterns/mrtr
…tState` as an attacker-controlled input. If `requestState` influences authorization, resource access, or business logic, servers **MUST** protect its integrity (e.g. HMAC or AEAD) and **MUST** reje…
Streamable HTTP
Model Context Protocol · in the page
specification/2026-07-28/basic/transports/streamable-http
…network interfaces (0.0.0.0). 3. Servers **SHOULD** implement proper authentication for all connections. Without these protections, attackers could use DNS rebinding to interact with local MCP serve…
Key Changes
Model Context Protocol · in the page
specification/2026-07-28/changelog
…to `-32602` (Invalid Params) to align with JSON-RPC specification. 7. Authorization servers **SHOULD** include the `iss` parameter in authorization responses per [RFC 9207](https://datatracker.ietf…
Elicitation
Model Context Protocol · in the page
specification/2026-07-28/client/elicitation
…this context refers to secrets and credentials that grant access or > authorize transactions. General contact or profile information (such as a name, email address, > or username) is not categorically…