390 pages for permissions.

Understanding MCP clients Model Context Protocol · in the page docs/2025-03-26/learn/client-concepts …c workflow. This approach puts the client in complete control of user permissions and security measures. | A server for booking travel may send a list of flights to an LLM and request that the LLM pic… Debugging Model Context Protocol · in the page docs/2025-03-26/tools/debugging …als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-03-26/tutorials/security/authorization …authorize` endpoint, where the user can log in and grant the required permissions. The authorization server will then redirect back to the client with an authorization code that the client exchanges f… Security Best Practices Model Context Protocol · in the page docs/2025-03-26/tutorials/security/security_best_practices …xt when possible * Use principle of least privilege for proxy process permissions * Implement process-level sandboxing for the proxy service itself * Consider running the proxy in a container or restr… Build an MCP client Model Context Protocol · in the page docs/2025-06-18/develop/build-client …y in `.env` * Validate server responses * Be cautious with tool permissions ## Troubleshooting ### Server Path Issues * Double-check the path to your server script is correct * Use the absolu… Client Best Practices Model Context Protocol · in the page docs/2025-06-18/develop/clients/client-best-practices …solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime… Connect to local MCP servers Model Context Protocol · in the page docs/2025-06-18/develop/connect-local-servers …Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf… Connect to remote MCP Servers Model Context Protocol · in the page docs/2025-06-18/develop/connect-remote-servers …0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all… Architecture overview Model Context Protocol · in the page docs/2025-06-18/learn/architecture …may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens… Understanding MCP clients Model Context Protocol · in the page docs/2025-06-18/learn/client-concepts …c workflow. This approach puts the client in complete control of user permissions and security measures. | A server for booking travel may send a list of flights to an LLM and request that the LLM pic… Debugging Model Context Protocol · in the page docs/2025-06-18/tools/debugging …als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-06-18/tutorials/security/authorization …authorize` endpoint, where the user can log in and grant the required permissions. The authorization server will then redirect back to the client with an authorization code that the client exchanges f… Security Best Practices Model Context Protocol · in the page docs/2025-06-18/tutorials/security/security_best_practices …xt when possible * Use principle of least privilege for proxy process permissions * Implement process-level sandboxing for the proxy service itself * Consider running the proxy in a container or restr… Build an MCP client Model Context Protocol · in the page docs/2025-11-25/develop/build-client …y in `.env` * Validate server responses * Be cautious with tool permissions 4. **Tool Names** * Tool names can be validated according to the format specified [here](/specification/2025-11-25… Client Best Practices Model Context Protocol · in the page docs/2025-11-25/develop/clients/client-best-practices …solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime… Connect to local MCP servers Model Context Protocol · in the page docs/2025-11-25/develop/connect-local-servers …Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf… Connect to remote MCP Servers Model Context Protocol · in the page docs/2025-11-25/develop/connect-remote-servers …0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all… Architecture overview Model Context Protocol · in the page docs/2025-11-25/learn/architecture …may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens… Understanding MCP clients Model Context Protocol · in the page docs/2025-11-25/learn/client-concepts …c workflow. This approach puts the client in complete control of user permissions and security measures. | A server for booking travel may send a list of flights to an LLM and request that the LLM pic… Debugging Model Context Protocol · in the page docs/2025-11-25/tools/debugging …als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-11-25/tutorials/security/authorization …authorize` endpoint, where the user can log in and grant the required permissions. The authorization server will then redirect back to the client with an authorization code that the client exchanges f… Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …xt when possible * Use principle of least privilege for proxy process permissions * Implement process-level sandboxing for the proxy service itself * Consider running the proxy in a container or restr… Build an MCP client Model Context Protocol · in the page docs/2026-07-28/develop/build-client …y in `.env` * Validate server responses * Be cautious with tool permissions 4. **Tool Names** * Tool names can be validated according to the format specified [here](/specification/2026-07-28… Client Best Practices Model Context Protocol · in the page docs/2026-07-28/develop/clients/client-best-practices …solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime… Connect to local MCP servers Model Context Protocol · in the page docs/2026-07-28/develop/connect-local-servers …Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf… Connect to remote MCP Servers Model Context Protocol · in the page docs/2026-07-28/develop/connect-remote-servers …0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all… Architecture overview Model Context Protocol · in the page docs/2026-07-28/learn/architecture …may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens… Understanding MCP clients Model Context Protocol · in the page docs/2026-07-28/learn/client-concepts …c workflow. This approach puts the client in complete control of user permissions and security measures. Sampling is deprecated as of protocol version `2026-07-28`. | A server for booking travel may s… Debugging Model Context Protocol · in the page docs/2026-07-28/tools/debugging …als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se… Authorization Model Context Protocol · in the page docs/2026-07-28/tools/inspector/authorization …e-authentication required** banner, and step-up opens an **Additional permissions required** dialog listing the scopes, which you confirm with **Authorize**. Each server's **Insufficient-scope respons… CLI client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/cli …App](/extensions/apps/overview.md) UI (its `ui://` resource, CSP, and permissions) **without calling the tool**, so a pipeline can decide whether it needs a browser before invoking anything: ```bash… Configuration and flags Model Context Protocol · in the page docs/2026-07-28/tools/inspector/configuration …. Restore the key, or delete the file and enter the values again. * **Permissions are enforced.** The file is written `0600` and re-tightened at startup. If it can't be (another owner, a read-only mou… Recipes Model Context Protocol · in the page docs/2026-07-28/tools/inspector/recipes …html", "csp": { "connectDomains": ["https://api.example.com"] }, "permissions": { "clipboard": false }, "prefersBorder": true, "resourceMimeType": "text/html" } ``` `csp` and `permissions` (a… Security Model Context Protocol · in the page docs/2026-07-28/tools/inspector/security …ess holding live connections**, guarded by a token and same-user file permissions. ## The web backend and its API token The web client is a browser app backed by a Node server that owns the MCP conn… Web client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/web …-only (lost on restart), in an unencrypted file, in a file with loose permissions, or in a file that can't be read.  turns out to be vulnerabl… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …xt when possible * Use principle of least privilege for proxy process permissions * Implement process-level sandboxing for the proxy service itself * Consider running the proxy in a container or restr… Build an MCP client Model Context Protocol · in the page docs/draft/develop/build-client …y in `.env` * Validate server responses * Be cautious with tool permissions 4. **Tool Names** * Tool names can be validated according to the format specified [here](/specification/draft/serv… Client Best Practices Model Context Protocol · in the page docs/draft/develop/clients/client-best-practices …solated-vm` | Rust / Node / CLI | V8-based runtimes with fine-grained permissions. Can disable all permissions for full lockdown. | | **Python** | [Monty](https://github.com/pydantic/monty) *(experime… Connect to local MCP servers Model Context Protocol · in the page docs/draft/develop/connect-local-servers …Claude reading and modifying. The server runs with your user account permissions, so it can perform any file operations you can perform manually. **4. Restart Claude Desktop** After saving the conf… Connect to remote MCP Servers Model Context Protocol · in the page docs/draft/develop/connect-remote-servers …0mCNH\&q=85\&s=68722669d9e18252756885c703e4f221) **5. Configure Tool Permissions** Remote MCP servers often expose multiple tools with varying capabilities. You can control which tools Claude is all… Architecture overview Model Context Protocol · in the page docs/draft/learn/architecture …may come and go based on server state, external dependencies, or user permissions 2. **Efficiency**: Clients don't need to poll for changes; they're notified when updates occur 3. **Consistency**: Ens… Understanding MCP clients Model Context Protocol · in the page docs/draft/learn/client-concepts …c workflow. This approach puts the client in complete control of user permissions and security measures. Sampling is deprecated as of protocol version `2026-07-28`. | A server for booking travel may s… Debugging Model Context Protocol · in the page docs/draft/tools/debugging …als * Mask personal information 2. **Access Control** * Verify permissions * Check authentication * Monitor access patterns For a full treatment of MCP attack vectors and mitigations, se… Authorization Model Context Protocol · in the page docs/draft/tools/inspector/authorization …e-authentication required** banner, and step-up opens an **Additional permissions required** dialog listing the scopes, which you confirm with **Authorize**. Each server's **Insufficient-scope respons… CLI client Model Context Protocol · in the page docs/draft/tools/inspector/cli …App](/extensions/apps/overview.md) UI (its `ui://` resource, CSP, and permissions) **without calling the tool**, so a pipeline can decide whether it needs a browser before invoking anything: ```bash… Configuration and flags Model Context Protocol · in the page docs/draft/tools/inspector/configuration …. Restore the key, or delete the file and enter the values again. * **Permissions are enforced.** The file is written `0600` and re-tightened at startup. If it can't be (another owner, a read-only mou… Recipes Model Context Protocol · in the page docs/draft/tools/inspector/recipes …html", "csp": { "connectDomains": ["https://api.example.com"] }, "permissions": { "clipboard": false }, "prefersBorder": true, "resourceMimeType": "text/html" } ``` `csp` and `permissions` (a… Security Model Context Protocol · in the page docs/draft/tools/inspector/security …ess holding live connections**, guarded by a token and same-user file permissions. ## The web backend and its API token The web client is a browser app backed by a Node server that owns the MCP conn…