265 pages for root.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Recipes
Model Context Protocol · in the page
docs/2026-07-28/tools/inspector/recipes
…und to `0.0.0.0:6274` with browser auto-open off, and runs as the non-root `node` user (uid `1000`). It sets `DANGEROUSLY_BIND_ALL_INTERFACES=true` because a container must bind the wildcard address t…
Security
Model Context Protocol · in the page
docs/2026-07-28/tools/inspector/security
…file is **plaintext unless you supply a key**. It is then readable by root and every member of the host's `docker` group (which is equivalent to root), and by anyone who obtains a backup, snapshot or…
TUI client
Model Context Protocol · in the page
docs/2026-07-28/tools/inspector/tui
…`i` | Server configuration, name, version and instructions, plus the roots the client advertises (press `e` to edit them). | | **Auth** | `a` | OAuth state for the selected HTTP or SSE server, plus a…
Web client
Model Context Protocol · in the page
docs/2026-07-28/tools/inspector/web
…eras.md#reproducing-each-era-locally)) to watch a tool disappear. * **Roots**: the roots advertised via the `roots` client capability. `@modelcontextprotocol/server-filesystem`, for instance, calls `r…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/authorization
…xtprotocol/python-sdk). > > **Python MCP Server** > > In the server's root have a `pyproject.toml` file and a `mcp_server` folder. Put all the Python files in the `mcp_server` folder, and fill the `py…
Local Server Security
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/local-server-security
…need file access. The question is how much. * **Grant the narrowest root that works.** Configure filesystem-oriented servers with a specific project directory, passed explicitly through the serv…
Security Best Practices
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/security_best_practices
…ded * Use platform-appropriate sandboxing technologies (containers, chroot, application sandboxes, etc.) * Keep sandboxing solutions up-to-date to account for emerging vulnerabilities MCP servers…
Build an MCP client
Model Context Protocol · in the page
docs/draft/develop/build-client
…5 build/index.js" > } > } > ``` > > Create a `tsconfig.json` in the root of your project: > > ```json tsconfig.json theme={null} > { > "compilerOptions": { > "target": "ES2022", > "module"…
Build an MCP server
Model Context Protocol · in the page
docs/draft/develop/build-server
…> "files": ["build"] > } > ``` > > Create a `tsconfig.json` in the root of your project: > > ```json tsconfig.json theme={null} > { > "compilerOptions": { > "target": "ES2022", > "module"…
Understanding MCP clients
Model Context Protocol · in the page
docs/draft/learn/client-concepts
…seats, room type or their contact number to finalize a booking. | | **Roots** | Roots allow clients to specify which directories servers should focus on, communicating intended scope through a coordin…
CLI client
Model Context Protocol · in the page
docs/draft/tools/inspector/cli
…lcontextprotocol.io/docs/draft/tools/inspector/protocol-eras.md), and roots) apply to the connection, resolved exactly as the TUI and web client resolve them. A `--header` flag overrides the file's he…
Configuration and flags
Model Context Protocol · in the page
docs/draft/tools/inspector/configuration
…a key, that file is **unencrypted**. Mode `0600` keeps out other non-root users, but not root, not backups or copies of your home directory, and not any program running as you, including the stdio se…
Protocol eras
Model Context Protocol · in the page
docs/draft/tools/inspector/protocol-eras
…eb && npm run test-servers:build && cd ../.. ``` Then, from the repo root, start a server from the config a section names: ```bash theme={null} node test-servers/build/server-composable.js --config…
Recipes
Model Context Protocol · in the page
docs/draft/tools/inspector/recipes
…und to `0.0.0.0:6274` with browser auto-open off, and runs as the non-root `node` user (uid `1000`). It sets `DANGEROUSLY_BIND_ALL_INTERFACES=true` because a container must bind the wildcard address t…
Security
Model Context Protocol · in the page
docs/draft/tools/inspector/security
…file is **plaintext unless you supply a key**. It is then readable by root and every member of the host's `docker` group (which is equivalent to root), and by anyone who obtains a backup, snapshot or…
TUI client
Model Context Protocol · in the page
docs/draft/tools/inspector/tui
…`i` | Server configuration, name, version and instructions, plus the roots the client advertises (press `e` to edit them). | | **Auth** | `a` | OAuth state for the selected HTTP or SSE server, plus a…
Web client
Model Context Protocol · in the page
docs/draft/tools/inspector/web
…eras.md#reproducing-each-era-locally)) to watch a tool disappear. * **Roots**: the roots advertised via the `roots` client capability. `@modelcontextprotocol/server-filesystem`, for instance, calls `r…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/draft/tutorials/security/authorization
…xtprotocol/python-sdk). > > **Python MCP Server** > > In the server's root have a `pyproject.toml` file and a `mcp_server` folder. Put all the Python files in the `mcp_server` folder, and fill the `py…
Local Server Security
Model Context Protocol · in the page
docs/draft/tutorials/security/local-server-security
…need file access. The question is how much. * **Grant the narrowest root that works.** Configure filesystem-oriented servers with a specific project directory, passed explicitly through the serv…
Security Best Practices
Model Context Protocol · in the page
docs/draft/tutorials/security/security_best_practices
…ded * Use platform-appropriate sandboxing technologies (containers, chroot, application sandboxes, etc.) * Keep sandboxing solutions up-to-date to account for emerging vulnerabilities MCP servers…
Build an MCP App
Model Context Protocol · in the page
extensions/apps/build
…ell with Vite. The `include` array covers both the server code in the root and UI code in `src/`. > > ```json theme={null} > { > "compilerOptions": { > "target": "ES2022", > "module": "ESNex…
Extensions Overview
Model Context Protocol · in the page
extensions/overview
…: { "protocolVersion": "2025-11-25", "capabilities": { "roots": { "listChanged": true }, "extensions": { "io.modelcontextprotocol/ui": { "mimeTypes"…
Skills
Model Context Protocol · in the page
extensions/skills/overview
…atch `name`. Clients resolve relative references against the skill's root directory. In this example, `references/checklist.md` resolves to `skill://code-review/references/checklist.md`. The supporti…
SEP-1302: Formalize Working Groups and Interest Groups in MCP Governance
Model Context Protocol · in the page
seps/1302-formalize-working-groups-and-interest-groups-in-mc
…contextprotocol-community/working-groups) for pushing equivalent grassroots initiatives, mostly in pursuit of creating artifacts for SEP consideration (e.g. hosting, UI, tool-interfaces, search-tools)…
SEP-2106: Tools `inputSchema` & `outputSchema` Conform to JSON Schema 2020-12
Model Context Protocol · in the page
seps/2106-json-schema-2020-12
…edContent` to allow arrays, this would be an incomplete solution. The root cause is that the schema types are artificially restricted to `type: "object"`. By allowing any valid JSON Schema, we: 1. En…
SEP-2133: Extensions
Model Context Protocol · in the page
seps/2133-extensions
…: { "protocolVersion": "2025-06-18", "capabilities": { "roots": { "listChanged": true }, "extensions": { "io.modelcontextprotocol/ui": { "mimeTypes"…
SEP-2260: Require Server requests to be associated with a Client request.
Model Context Protocol · in the page
seps/2260-Require-Server-requests-to-be-associated-with-Client-requests
…textprotocol/pull/2260) | *** ## Abstract This SEP clarifies that `roots/list`, `sampling/createMessage`, and `elicitation/create` requests **MUST** be associated with an originating client-to-serv…
SEP-2322: Multi Round-Trip Requests
Model Context Protocol · in the page
seps/2322-MRTR
…server-initiated request features like Elicitation, Sampling and ListRoots is very low or blocked for many Remote MCP servers or Server Hosted Clients due to the operational complextity of supporting…
SEP-2575: Make MCP Stateless
Model Context Protocol · in the page
seps/2575-stateless-mcp
…y explicitly setting a level. Replaces the `logging/setLevel` RPC. Roots are intentionally not included as a per-request `_meta` field. Servers that need the client's roots **MUST** request them vi…
SEP-2596: Specification Feature Lifecycle and Deprecation Policy
Model Context Protocol · in the page
seps/2596-spec-feature-lifecycle-and-deprecation
…ource` and `ResourceTemplate` ([#1540][issue-1540]) and deprecating roots, sampling, and logging ([SEP-2577][sep-2577]) would each retire existing surface area but have no process to follow. This…
SEP-2640: Skills Extension
Model Context Protocol · in the page
seps/2640-skills-extension
….md` frontmatter. * Every skill MUST contain a `SKILL.md` file at its root. * `SKILL.md` MUST begin with YAML frontmatter containing at minimum the `name` and `description` fields as defined by the Ag…
Specification Enhancement Proposals (SEPs)
Model Context Protocol · in the page
seps/index
…17 | | [SEP-2577](https://modelcontextprotocol.io/seps/2577-deprecate-roots-sampling-and-logging.md) | Deprecate Roots, Sampling, and Logging | Final | Standards Track | 2026-04-14 | | [SEP-2575](http…
Overview
Model Context Protocol · in the page
specification/2024-11-05/basic/index
…pts, and tools exposed by servers * **Client Features**: Sampling and root directory lists provided by clients * **Utilities**: Cross-cutting concerns like logging and argument completion All impleme…
Lifecycle
Model Context Protocol · in the page
specification/2024-11-05/basic/lifecycle
…: { "protocolVersion": "2024-11-05", "capabilities": { "roots": { "listChanged": true }, "sampling": {} }, "clientInfo": { "name": "ExampleClient",…
Authorization
Model Context Protocol · in the page
specification/2025-03-26/basic/authorization
…This ensures authorization endpoints are consistently located at the root level of the domain hosting the MCP server, regardless of any path components in the MCP server URL. #### Fallbacks for Serv…
Overview
Model Context Protocol · in the page
specification/2025-03-26/basic/index
…pts, and tools exposed by servers * **Client Features**: Sampling and root directory lists provided by clients * **Utilities**: Cross-cutting concerns like logging and argument completion All impleme…
Lifecycle
Model Context Protocol · in the page
specification/2025-03-26/basic/lifecycle
…: { "protocolVersion": "2025-03-26", "capabilities": { "roots": { "listChanged": true }, "sampling": {} }, "clientInfo": { "name": "ExampleClient",…
Overview
Model Context Protocol · in the page
specification/2025-06-18/basic/index
…pts, and tools exposed by servers * **Client Features**: Sampling and root directory lists provided by clients * **Utilities**: Cross-cutting concerns like logging and argument completion All impleme…
Lifecycle
Model Context Protocol · in the page
specification/2025-06-18/basic/lifecycle
…: { "protocolVersion": "2025-06-18", "capabilities": { "roots": { "listChanged": true }, "sampling": {}, "elicitation": {} }, "clientInfo": { "nam…
Specification
Model Context Protocol · in the page
specification/2025-06-18/index
…Server-initiated agentic behaviors and recursive LLM interactions * **Roots**: Server-initiated inquiries into uri or filesystem boundaries to operate in * **Elicitation**: Server-initiated requests f…
Schema Reference
Model Context Protocol · in the page
specification/2025-06-18/schema
…</span><br /> <a class="tsd-kind-property" href="#clientcapabilities-roots">roots</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">\{</span> <span class="tsd-kind-pr…
Authorization
Model Context Protocol · in the page
specification/2025-11-25/basic/authorization
…mple.com/.well-known/oauth-protected-resource/public/mcp` * At the root: `https://example.com/.well-known/oauth-protected-resource` MCP clients **MUST** support both discovery mechanisms and use t…
Overview
Model Context Protocol · in the page
specification/2025-11-25/basic/index
…pts, and tools exposed by servers * **Client Features**: Sampling and root directory lists provided by clients * **Utilities**: Cross-cutting concerns like logging and argument completion All impleme…
Lifecycle
Model Context Protocol · in the page
specification/2025-11-25/basic/lifecycle
…: { "protocolVersion": "2025-11-25", "capabilities": { "roots": { "listChanged": true }, "sampling": {}, "elicitation": { "form": {}, "url": {}…
Specification
Model Context Protocol · in the page
specification/2025-11-25/index
…Server-initiated agentic behaviors and recursive LLM interactions * **Roots**: Server-initiated inquiries into URI or filesystem boundaries to operate in * **Elicitation**: Server-initiated requests f…
Schema Reference
Model Context Protocol · in the page
specification/2025-11-25/schema
…</span><br /> <a class="tsd-kind-property" href="#clientcapabilities-roots">roots</a><span class="tsd-signature-symbol">?:</span> <span class="tsd-signature-symbol">\{</span> <span class="tsd-kind-pr…
Architecture
Model Context Protocol · in the page
specification/2026-07-28/architecture/index
…cused responsibilities * Request client input (sampling, elicitation, roots) via `InputRequiredResult` within a reply * Must respect security constraints * Can be local processes or remote services #…
Authorization Server Discovery
Model Context Protocol · in the page
specification/2026-07-28/basic/authorization/authorization-server-discovery
…mple.com/.well-known/oauth-protected-resource/public/mcp` * At the root: `https://example.com/.well-known/oauth-protected-resource` MCP clients **MUST** support both discovery mechanisms and use t…
Overview
Model Context Protocol · in the page
specification/2026-07-28/basic/index
…s exposed by servers * **Client Features**: Elicitation, sampling and root directory lists provided by clients * **Utilities**: Cross-cutting concerns like logging and argument completion All impleme…
Overview
Model Context Protocol · in the page
specification/2026-07-28/basic/patterns/index
…Requests When a server needs client input (sampling, elicitation, or roots) to complete a request, it answers with an [`InputRequiredResult`](https://modelcontextprotocol.io/specification/2026-07-28/…