386 pages for permissions.

MCP Apps Model Context Protocol · in the page extensions/apps/overview …, ensuring security. The resource's `_meta.ui` object can include `permissions` to request additional capabilities (e.g., microphone, camera) and `csp` to control what external origins the app c… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …the token's audience, issuer, and expiration. 2. **Map IdP claims to permissions** — ID-JAG tokens carry claims (scope and resource information) that your server uses to determine who the employee is… OAuth Client Credentials Model Context Protocol · in the page extensions/auth/oauth-client-credentials …after any suspected compromise. > * Scope credentials to the minimum permissions required. > * Prefer JWT assertions when possible — they are short-lived and do not require transmitting the signing k… How to Automate Publishing with GitHub Actions Model Context Protocol · in the page registry/github-actions …ion tags like v1.0.0 jobs: publish: runs-on: ubuntu-latest permissions: id-token: write # Required for OIDC authentication contents: read steps: - name: Checkout code… SEP-1865: MCP Apps - Interactive User Interfaces for MCP Model Context Protocol · in the page seps/1865-mcp-apps-interactive-user-interfaces-for-mcp …andboxing**: All UI content runs in sandboxed iframes with restricted permissions * **Predeclared templates**: Hosts can review HTML content before rendering * **Auditable messages**: All UI-to-host c… SEP-2243: HTTP Header Standardization for Streamable HTTP Transport Model Context Protocol · in the page seps/2243-http-standardization …ames) MUST be independently verified against the authenticated user's permissions before granting access to those resources. * Header values MUST NOT be used as the sole basis for granting elevated pr… SEP-2640: Skills Extension Model Context Protocol · in the page seps/2640-skills-extension …OT honor frontmatter fields that widen the model's tool or filesystem permissions when the skill arrives over MCP. In particular, the Agent Skills `allowed-tools` field, which a filesystem-sourced ski… Architecture Model Context Protocol · in the page specification/2024-11-05/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Roots Model Context Protocol · in the page specification/2024-11-05/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/2024-11-05/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text or imag… Resources Model Context Protocol · in the page specification/2024-11-05/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations Architecture Model Context Protocol · in the page specification/2025-03-26/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Authorization Model Context Protocol · in the page specification/2025-03-26/basic/authorization …or token invalid | | 403 | Forbidden | Invalid scopes or insufficient permissions | | 400 | Bad Request | Malformed authorization request | ### Implementation Requirements 1. Implementations **MUST*… Roots Model Context Protocol · in the page specification/2025-03-26/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/2025-03-26/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text, audio,… Resources Model Context Protocol · in the page specification/2025-03-26/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations Architecture Model Context Protocol · in the page specification/2025-06-18/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Authorization Model Context Protocol · in the page specification/2025-06-18/basic/authorization …or token invalid | | 403 | Forbidden | Invalid scopes or insufficient permissions | | 400 | Bad Request | Malformed authorization request | ## Security Considerations Implementations **MUST** follow… Roots Model Context Protocol · in the page specification/2025-06-18/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/2025-06-18/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text, audio,… Resources Model Context Protocol · in the page specification/2025-06-18/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations Architecture Model Context Protocol · in the page specification/2025-11-25/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Authorization Model Context Protocol · in the page specification/2025-11-25/basic/authorization …e of least privilege and preventing clients from requesting excessive permissions. The scopes included in the `WWW-Authenticate` challenge **MAY** match `scopes_supported`, be a subset or superset of… Roots Model Context Protocol · in the page specification/2025-11-25/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/2025-11-25/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text, audio,… Resources Model Context Protocol · in the page specification/2025-11-25/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations Architecture Model Context Protocol · in the page specification/2026-07-28/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Authorization Model Context Protocol · in the page specification/2026-07-28/basic/authorization/index …e of least privilege and preventing clients from requesting excessive permissions. The scopes included in the `WWW-Authenticate` challenge **MAY** match `scopes_supported`, be a subset or superset of… Roots Model Context Protocol · in the page specification/2026-07-28/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/2026-07-28/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text, audio,… Resources Model Context Protocol · in the page specification/2026-07-28/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations 5. Servers **MUST** sanitize file paths to prevent directory traversal attacks… Architecture Model Context Protocol · in the page specification/draft/architecture/index …es and manages multiple client instances * Controls client connection permissions and lifecycle * Enforces security policies and consent requirements * Handles user authorization decisions * Coordinat… Authorization Model Context Protocol · in the page specification/draft/basic/authorization/index …e of least privilege and preventing clients from requesting excessive permissions. The scopes included in the `WWW-Authenticate` challenge **MAY** match `scopes_supported`, be a subset or superset of… Roots Model Context Protocol · in the page specification/draft/client/roots …rations 1. Clients **MUST**: * Only expose roots with appropriate permissions * Validate all root URIs to prevent path traversal * Implement proper access controls * Monitor root accessib… Sampling Model Context Protocol · in the page specification/draft/client/sampling …allows clients to maintain control over model access, selection, and permissions while enabling servers to leverage AI capabilities—with no server API keys necessary. Servers can request text, audio,… Resources Model Context Protocol · in the page specification/draft/server/resources …ive resources 3. Binary data **MUST** be properly encoded 4. Resource permissions **SHOULD** be checked before operations 5. Servers **MUST** sanitize file paths to prevent directory traversal attacks…