171 pages for editor.

Build an MCP server Model Context Protocol · in the page docs/2025-03-26/develop/build-server …rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst… Build an MCP server Model Context Protocol · in the page docs/2025-06-18/develop/build-server …rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst… Build an MCP server Model Context Protocol · in the page docs/2025-11-25/develop/build-server …rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst… Build an MCP server Model Context Protocol · in the page docs/2026-07-28/develop/build-server …rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst… Local Server Security Model Context Protocol · in the page docs/2026-07-28/tutorials/security/local-server-security …ed first.** Assume users install servers the same way they install editor extensions. A workable starting posture: * **Define approved sources.** Publish a short allowlist of vetted servers (wi… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …a the audience claim, as mentioned in [RFC9068](https://www.rfc-editor.org/rfc/rfc9068.html)), it may accept tokens originally issued for other services. This breaks a fundamental OAuth se… Build an MCP server Model Context Protocol · in the page docs/draft/develop/build-server …rary/Application Support/Claude/claude_desktop_config.json` in a text editor. Make sure to create the file if it doesn't exist. For example, if you have [VS Code](https://code.visualstudio.com/) inst… Local Server Security Model Context Protocol · in the page docs/draft/tutorials/security/local-server-security …ed first.** Assume users install servers the same way they install editor extensions. A workable starting posture: * **Define approved sources.** Publish a short allowlist of vetted servers (wi… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …a the audience claim, as mentioned in [RFC9068](https://www.rfc-editor.org/rfc/rfc9068.html)), it may accept tokens originally issued for other services. This breaks a fundamental OAuth se… SEP-2133: Extensions Model Context Protocol · in the page seps/2133-extensions …e language as the core specification (i.e. \[[BCP 14](https://www.rfc-editor.org/info/bcp14)] \[[RFC2119](https://datatracker.ietf.org/doc/html/rfc2119)] \[[RFC8174](https://datatracker.ietf.org/doc/h… SEP-2596: Specification Feature Lifecycle and Deprecation Policy Model Context Protocol · in the page seps/2596-spec-feature-lifecycle-and-deprecation …t, and Final for specification *revisions*. Those states describe the editorial maturity of a whole document and say nothing about whether a given message or field within a Current revision is on its… SEP-991: Enable URL-based Client Registration using OAuth Client ID Metadata Documents Model Context Protocol · in the page seps/991-enable-url-based-client-registration-using-oauth-c …* [RFC 7591 - OAuth 2.0 Dynamic Client Registration](https://www.rfc-editor.org/rfc/rfc7591.html) * [MCP Specification - Authorization](https://modelcontextprotocol.org/docs/spec/authorization) * [Ev… Authorization Model Context Protocol · in the page specification/2025-06-18/basic/authorization …rce Indicators for OAuth 2.0 as defined in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to explicitly specify the target resource for which the token is being requested. The `resource` para… Key Changes Model Context Protocol · in the page specification/2025-06-18/changelog …lement Resource Indicators as described in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to prevent malicious servers from obtaining access tokens. (PR [#734](https://github.com/modelc… Authorization Model Context Protocol · in the page specification/2025-11-25/basic/authorization …rce Indicators for OAuth 2.0 as defined in [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) to explicitly specify the target resource for which the token is being requested. The `resource` para… Authorization Model Context Protocol · in the page specification/2026-07-28/basic/authorization/index …91)) * Resource Indicators for OAuth 2.0 ([RFC8707](https://www.rfc-editor.org/rfc/rfc8707.html)) * OAuth 2.0 Protected Resource Metadata ([RFC9728](https://datatracker.ietf.org/doc/html/rfc9728)) *… Authorization Security Considerations Model Context Protocol · in the page specification/2026-07-28/basic/authorization/security-considerations …## Token Audience Binding and Validation [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) Resource Indicators provide critical security benefits by binding tokens to their intended audiences… Streamable HTTP Model Context Protocol · in the page specification/2026-07-28/basic/transports/streamable-http …| Server MUST reject the request | [http-semantics]: https://www.rfc-editor.org/rfc/rfc9110.html#name-field-names ### Case Sensitivity Header names (called "field names" in [RFC 9110][rfc9110-names… Authorization Model Context Protocol · in the page specification/draft/basic/authorization/index …91)) * Resource Indicators for OAuth 2.0 ([RFC8707](https://www.rfc-editor.org/rfc/rfc8707.html)) * OAuth 2.0 Protected Resource Metadata ([RFC9728](https://datatracker.ietf.org/doc/html/rfc9728)) *… Authorization Security Considerations Model Context Protocol · in the page specification/draft/basic/authorization/security-considerations …## Token Audience Binding and Validation [RFC 8707](https://www.rfc-editor.org/rfc/rfc8707.html) Resource Indicators provide critical security benefits by binding tokens to their intended audiences… Streamable HTTP Model Context Protocol · in the page specification/draft/basic/transports/streamable-http …| Server MUST reject the request | [http-semantics]: https://www.rfc-editor.org/rfc/rfc9110.html#name-field-names ### Case Sensitivity Header names (called "field names" in [RFC 9110][rfc9110-names…