423 pages for link.

Progressive Disclosure Charter Model Context Protocol · in the page community/working-groups/progressive-disclosure …tions of each strategy, including prior art, examples, and discussion links. ## WG Principles 1. **Document discussions** - the WG aims to document the trade-offs and discussions rather than dictate… Server Card Charter Model Context Protocol · in the page community/working-groups/server-card …(external) — ongoing discussion on whether and how an AI Catalog can link directly to an MCP Server Card. ## Leadership | Role | Name | Organization | GitHub | Term | | - | - | - | - | - | | Lead |… Skills Over MCP Charter Model Context Protocol · in the page community/working-groups/skills-over-mcp …ues](https://github.com/modelcontextprotocol/ext-skills/issues), with links to SDK or client issues where the implementation lives. Owners, progress, and priorities are maintained there rather than in… Transports Charter Model Context Protocol · in the page community/working-groups/transports …status, and supporting rationale remain publicly discoverable in or linked from the working group repository. ## Changelog | Date | Change | | - | - | | 2026-08-23 | Initial charter | Working and Interest Groups Model Context Protocol · in the page community/working-interest-groups …ance * Have agendas published and publicly available. The agenda or a link to the agenda should be published as a [GitHub Discussion in the Meeting Notes category](https://github.com/modelcontextproto… Client Best Practices Model Context Protocol · in the page docs/2024-11-05/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Security Best Practices Model Context Protocol · in the page docs/2024-11-05/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… Client Best Practices Model Context Protocol · in the page docs/2025-03-26/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Security Best Practices Model Context Protocol · in the page docs/2025-03-26/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… Client Best Practices Model Context Protocol · in the page docs/2025-06-18/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Security Best Practices Model Context Protocol · in the page docs/2025-06-18/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… Client Best Practices Model Context Protocol · in the page docs/2025-11-25/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… Client Best Practices Model Context Protocol · in the page docs/2026-07-28/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Authorization Model Context Protocol · in the page docs/2026-07-28/tools/inspector/authorization …without connecting. | | `--print-handoff` | Print a JSON block (`deepLink`, `portForwardCmd`, `oauthStatePath`, `apiToken`) for `--server-url` and exit; this is everything a remote script needs to dr… Configuration and flags Model Context Protocol · in the page docs/2026-07-28/tools/inspector/configuration …e is unencrypted, loosely permissioned or unreadable. Both end with a link to the Inspector's [secret storage guide](https://github.com/modelcontextprotocol/inspector/blob/main/docs/secret-storage.md)… Recipes Model Context Protocol · in the page docs/2026-07-28/tools/inspector/recipes …nd your automation needs to know where it is. **4. Navigate one deep link to a rendered widget** ``` http://127.0.0.1:6274/?serverUrl=<encoded url>&transport=http&autoConnect=<TOKEN>&openApp=<tool>&… Security Model Context Protocol · in the page docs/2026-07-28/tools/inspector/security …ide which setup fits your machine. The configuration and recipe pages link here rather than repeating the reasoning. The short version: * **The web backend can spawn processes.** Its API token is wh… Web client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/web …with an entry expanded, showing the full JSON-RPC exchange. ## Deep links A driver (a script, a CI harness, or the CLI's [`--print-handoff`](/docs/2026-07-28/tools/inspector/authorization#handing-o… Local Server Security Model Context Protocol · in the page docs/2026-07-28/tutorials/security/local-server-security …e, targeted nation-state attacks, and protocol-level attacks (see the linked documents above). Before the mitigations, one fact that shapes them all: **no check proves what a server will do.** The pr… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… Client Best Practices Model Context Protocol · in the page docs/draft/develop/clients/client-best-practices …nsult your provider's caching documentation alongside the tool-search links above. ## Programmatic Tool Calling / Code Mode With direct tool calling, every tool invocation is a round trip: the model… Authorization Model Context Protocol · in the page docs/draft/tools/inspector/authorization …without connecting. | | `--print-handoff` | Print a JSON block (`deepLink`, `portForwardCmd`, `oauthStatePath`, `apiToken`) for `--server-url` and exit; this is everything a remote script needs to dr… Configuration and flags Model Context Protocol · in the page docs/draft/tools/inspector/configuration …e is unencrypted, loosely permissioned or unreadable. Both end with a link to the Inspector's [secret storage guide](https://github.com/modelcontextprotocol/inspector/blob/main/docs/secret-storage.md)… Recipes Model Context Protocol · in the page docs/draft/tools/inspector/recipes …nd your automation needs to know where it is. **4. Navigate one deep link to a rendered widget** ``` http://127.0.0.1:6274/?serverUrl=<encoded url>&transport=http&autoConnect=<TOKEN>&openApp=<tool>&… Security Model Context Protocol · in the page docs/draft/tools/inspector/security …ide which setup fits your machine. The configuration and recipe pages link here rather than repeating the reasoning. The short version: * **The web backend can spawn processes.** Its API token is wh… Web client Model Context Protocol · in the page docs/draft/tools/inspector/web …with an entry expanded, showing the full JSON-RPC exchange. ## Deep links A driver (a script, a CI harness, or the CLI's [`--print-handoff`](/docs/draft/tools/inspector/authorization#handing-off-fr… Local Server Security Model Context Protocol · in the page docs/draft/tutorials/security/local-server-security …e, targeted nation-state attacks, and protocol-level attacks (see the linked documents above). Before the mitigations, one fact that shapes them all: **no check proves what a server will do.** The pr… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …icious client, redirect_uri: attacker.com A->>UA: Sends malicious link UA->>TAS: Authorization request (client_id: mcp-proxy) + consent cookie rect rgba(255, 17, 0, 0.67) TAS->>TAS: Co… MCP Apps Model Context Protocol · in the page extensions/apps/overview …ild a web app? You could build a standalone web app and send users a link. However, MCP Apps offer these key advantages that a separate page can't match: * **Context preservation.** The app lives in… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …your authorization logic based on these claims. 3. **Handle Account Linking** - ID-JAG tokens will always contain a subject claim and may additionally contain an email claim that can be used to link… Skills Model Context Protocol · in the page extensions/skills/overview …[client matrix](/extensions/client-matrix.md) for Skills support and links to implementation documentation. ## Specification The full specification is in the [ext-skills repository](https://github.… How to Authenticate When Publishing to the Official MCP Registry Model Context Protocol · in the page registry/authentication …uthorize this application Waiting for authorization... ``` Visit the link, follow the prompts, and enter the authorization code that was printed in the terminal (e.g., `ABCD-1234` in the above output… MCP Registry Supported Package Types Model Context Protocol · in the page registry/package-types …he `mcp-name:` token as visible markdown text. A simple bullet in the Links section is the recommended pattern. ## Docker/OCI Images For Docker/OCI images, the MCP Registry currently supports: * Do… Quickstart: Publish an MCP Server to the MCP Registry Model Context Protocol · in the page registry/quickstart …uthorize this application Waiting for authorization... ``` Visit the link, follow the prompts, and enter the authorization code that was printed in the terminal (e.g., `ABCD-1234` in the above output… SEP-1024: MCP Client Security Requirements for Local Server Installation Model Context Protocol · in the page seps/1024-mcp-client-security-requirements-for-local-server- …ser systems through crafted MCP server configurations distributed via links or social engineering. This proposal establishes a best practice for MCP clients, requiring explicit user consent before ex… SEP-1036: URL Mode Elicitation for secure out-of-band interactions Model Context Protocol · in the page seps/1036-url-mode-elicitation-for-secure-out-of-band-intera …or example, a client could refuse to render a URL as a clickable hyperlink in a form mode elicitation request, reducing the likelihood of a user clicking on a malicious URL sent by a malicious server.… SEP-1686: Tasks Model Context Protocol · in the page seps/1686-tasks …tracking long-running operations. For example, a tool could return a linked resource that communicates operation status, and clients could subscribe to that resource to receive updates when the opera… SEP-1850: PR-Based SEP Workflow Model Context Protocol · in the page seps/1850-pr-based-sep-workflow …ersed content**: Proposal content was scattered across GitHub issues, linked documents, and pull requests, making review and archival difficult. * **Difficult collaboration**: Maintaining long-form sp… SEP-1865: MCP Apps - Interactive User Interfaces for MCP Model Context Protocol · in the page seps/1865-mcp-apps-interactive-user-interfaces-for-mcp …ptimization and the challenges in the UI review process. * **Resource links:** Predeclare the resources but return links in tool results. Deferred due to the gaps in performance optimization. ### R… SEP-2085: Governance Succession and Amendment Procedures Model Context Protocol · in the page seps/2085-governance-succession-and-amendment …ss" section. A draft pull request implementing these changes will be linked here once available. SEP-2106: Tools `inputSchema` & `outputSchema` Conform to JSON Schema 2020-12 Model Context Protocol · in the page seps/2106-json-schema-2020-12 …SHOULD enforce an allowlist of hosts (or at minimum reject loopback, link-local, and private network addresses), apply timeouts and size limits, and log dereferenced URIs. * Schemas that fail to vali… SEP-2127: MCP Server Cards - HTTP Server Discovery Model Context Protocol · in the page seps/2127-mcp-server-cards …tandardized mechanisms. For domain-level discovery, an AI Catalog can link to or embed the relevant Server Cards. Cards themselves can be hosted at any unreserved URI, with `<streamable-http-url>/serv… SEP-2133: Extensions Model Context Protocol · in the page seps/2133-extensions …](https://modelcontextprotocol.io/extensions.md) (to be created) with links to their specification. Links to relevant extensions MAY also be added to the core specification as appropriate (e.g. [http… SEP-2148: MCP Contributor Ladder Model Context Protocol · in the page seps/2148-contributor-ladder …ee or sponsor opens an issue using the nomination template, including links to contributions demonstrating requirements and sponsor confirmations 2. **Community Review**: 7-day period for community in… SEP-2149: MCP Group Governance and Charter Template Model Context Protocol · in the page seps/2149-working-group-charter-template …ance * Have agendas published and publicly available. The agenda or a link to the agenda should be published as a [GitHub Discussion in the Meeting Notes category](https://github.com/modelcontextproto… SEP-2207: OIDC-Flavored Refresh Token Guidance Model Context Protocol · in the page seps/2207-oidc-refresh-token-guidance …formance test**: Allowing for easy validation of SDK implementations Links to implementations will be added once the SEP is accepted. ## Acknowledgments This proposal was developed through discussi… SEP-2322: Multi Round-Trip Requests Model Context Protocol · in the page seps/2322-MRTR …t_required" // the request is incomplete and the result contains an {@link InputRequiredResult} object | string; // open to extensions ``` We anticipate this field will be useful for future extensi… SEP-2484: Require Conformance Tests for Standards Track SEPs to Reach Final Status Model Context Protocol · in the page seps/2484-conformance-tests-required-for-final-seps …t observable at the protocol level" ``` Structured data lets tooling link check failures back to spec sections and lets the conformance CLI report coverage per SEP. Exclusions come in two flavors. *… SEP-2567: Sessionless MCP via Explicit State Handles Model Context Protocol · in the page seps/2567-sessionless-mcp …osture as other ephemeral public IDs in common use — "anyone with the link" share URLs, password-reset tokens, Stripe Checkout session IDs — and carries the same tradeoff: convenient, but anyone who o…