1,268 pages for auth.

Deprecated Features Model Context Protocol · in the page specification/2026-07-28/deprecated …ation](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/client-registration.md#dynamic-client-registration) | [PR #2858](https://github.com/modelcontextprotocol/modelcontex… Specification Model Context Protocol · in the page specification/2026-07-28/index …nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi… Prompts Model Context Protocol · in the page specification/2026-07-28/server/prompts …for use. This refers to who decides when the prompt is used, not who authors its content. Prompt content is defined by the server. Typically, prompts would be triggered through user-initiated comman… Resources Model Context Protocol · in the page specification/2026-07-28/server/resources …fect of other requests on the connection. The set **MAY** vary by the authorization presented on the request — for example, returning only the resources the caller's granted scopes permit — since cred… Tools Model Context Protocol · in the page specification/2026-07-28/server/tools …fect of other requests on the connection. The set **MAY** vary by the authorization presented on the request — for example, returning only the tools the caller's granted scopes permit — since credenti… Caching Model Context Protocol · in the page specification/2026-07-28/server/utilities/caching …ared between callers. Cached responses **MAY** be reused for the same authorization context. Caches **MUST NOT** be shared across authorization contexts (e.g. a different access token requires a diffe… Architecture Model Context Protocol · in the page specification/draft/architecture/index …* Enforces security policies and consent requirements * Handles user authorization decisions * Coordinates AI/LLM integration and sampling * Manages context aggregation across clients ### Clients E… Overview Model Context Protocol · in the page specification/draft/basic/index …ponse, multi round-trip requests (MRTR), and subscribe and notify * **Authorization**: Authentication and authorization framework for HTTP-based transports * **Server Features**: Resources, prompts, a… Multi Round-Trip Requests Model Context Protocol · in the page specification/draft/basic/patterns/mrtr …tState` as an attacker-controlled input. If `requestState` influences authorization, resource access, or business logic, servers **MUST** protect its integrity (e.g. HMAC or AEAD) and **MUST** reje… Streamable HTTP Model Context Protocol · in the page specification/draft/basic/transports/streamable-http …network interfaces (0.0.0.0). 3. Servers **SHOULD** implement proper authentication for all connections. Without these protections, attackers could use DNS rebinding to interact with local MCP serve… Changelog Model Context Protocol · in the page specification/draft/changelog …mulate here. ## Minor changes 1. Update the referenced version of [OAuth Client ID Metadata Document](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-03) from `dra… Elicitation Model Context Protocol · in the page specification/draft/client/elicitation …this context refers to secrets and credentials that grant access or > authorize transactions. General contact or profile information (such as a name, email address, > or username) is not categorically… Deprecated Features Model Context Protocol · in the page specification/draft/deprecated …gistration](https://modelcontextprotocol.io/specification/draft/basic/authorization/client-registration.md#dynamic-client-registration) | [PR #2858](https://github.com/modelcontextprotocol/modelcontex… Specification Model Context Protocol · in the page specification/draft/index …nect LLMs with the context they need. This specification defines the authoritative protocol requirements, based on the TypeScript schema in [schema.ts](https://github.com/modelcontextprotocol/specifi… Prompts Model Context Protocol · in the page specification/draft/server/prompts …for use. This refers to who decides when the prompt is used, not who authors its content. Prompt content is defined by the server. Typically, prompts would be triggered through user-initiated comman… Resources Model Context Protocol · in the page specification/draft/server/resources …fect of other requests on the connection. The set **MAY** vary by the authorization presented on the request — for example, returning only the resources the caller's granted scopes permit — since cred… Tools Model Context Protocol · in the page specification/draft/server/tools …fect of other requests on the connection. The set **MAY** vary by the authorization presented on the request — for example, returning only the tools the caller's granted scopes permit — since credenti… Caching Model Context Protocol · in the page specification/draft/server/utilities/caching …ared between callers. Cached responses **MAY** be reused for the same authorization context. Caches **MUST NOT** be shared across authorization contexts (e.g. a different access token requires a diffe…