499 pages for force.

Governance Working Group Charter Model Context Protocol · in the page community/working-groups/governance …ore than 2 Leads from any single organisation; see Membership) is enforced at selection time. ## Authority & Decision Rights | Decision Type | Authority Level | | - | - | | Meeting logistics & sch… Build an MCP client Model Context Protocol · in the page docs/2024-11-05/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/2024-11-05/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/2024-11-05/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/2024-11-05/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Understanding Authorization in MCP Model Context Protocol · in the page docs/2024-11-05/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Security Best Practices Model Context Protocol · in the page docs/2024-11-05/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP client Model Context Protocol · in the page docs/2025-03-26/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/2025-03-26/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/2025-03-26/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/2025-03-26/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-03-26/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Security Best Practices Model Context Protocol · in the page docs/2025-03-26/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP client Model Context Protocol · in the page docs/2025-06-18/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/2025-06-18/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/2025-06-18/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/2025-06-18/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-06-18/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Security Best Practices Model Context Protocol · in the page docs/2025-06-18/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP client Model Context Protocol · in the page docs/2025-11-25/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/2025-11-25/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/2025-11-25/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/2025-11-25/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-11-25/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP client Model Context Protocol · in the page docs/2026-07-28/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/2026-07-28/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/2026-07-28/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/2026-07-28/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Configuration and flags Model Context Protocol · in the page docs/2026-07-28/tools/inspector/configuration …ntrols browser auto-open. `false` never opens one. In the CLI, `true` forces auto-open and lets interactive OAuth run without a TTY, and unset opens only on a TTY. In the web client, unset opens the U… mcpdo connection client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/mcpdo …neither stdin nor stderr is a TTY (and `MCP_AUTO_OPEN_ENABLED` is not forced on), `connect` exits `0` immediately with `pendingAuth: true` and an `authUrl`. Relay that URL to whoever will sign in. The… Understanding Authorization in MCP Model Context Protocol · in the page docs/2026-07-28/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Local Server Security Model Context Protocol · in the page docs/2026-07-28/tutorials/security/local-server-security …o there is no boundary between the two processes for a transport to enforce. This is by design: the SDKs assume full trust between stdio peers, and any isolation or security fencing around a local ser… Security Best Practices Model Context Protocol · in the page docs/2026-07-28/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP client Model Context Protocol · in the page docs/draft/develop/build-client …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["index.ts"], "exclude": ["node_modules"] } ``` ## Setting Up Your AP… Build an MCP server Model Context Protocol · in the page docs/draft/develop/build-server …t": true, "esModuleInterop": true, "skipLibCheck": true, "forceConsistentCasingInFileNames": true }, "include": ["src/**/*"], "exclude": ["node_modules"] } ``` Now let's dive into b… Client Best Practices Model Context Protocol · in the page docs/draft/develop/clients/client-best-practices …el calls a lightweight search tool search_tools({ query: "update salesforce record" }) // Returns concise matches: names and one-line descriptions only → [ { name: "salesforce_updateRecord", desc… Understanding MCP clients Model Context Protocol · in the page docs/draft/learn/client-concepts …d folders. While roots communicate intended boundaries, they do not enforce security restrictions. Actual security must be enforced at the operating system level, via file permissions and/or sandboxin… Configuration and flags Model Context Protocol · in the page docs/draft/tools/inspector/configuration …ntrols browser auto-open. `false` never opens one. In the CLI, `true` forces auto-open and lets interactive OAuth run without a TTY, and unset opens only on a TTY. In the web client, unset opens the U… mcpdo connection client Model Context Protocol · in the page docs/draft/tools/inspector/mcpdo …neither stdin nor stderr is a TTY (and `MCP_AUTO_OPEN_ENABLED` is not forced on), `connect` exits `0` immediately with `pendingAuth: true` and an `authUrl`. Relay that URL to whoever will sign in. The… Understanding Authorization in MCP Model Context Protocol · in the page docs/draft/tutorials/security/authorization …MCP server is not re-using expired or otherwise invalid tokens. * **Enforce HTTPS in production**. Do not accept tokens or redirect callbacks over plain HTTP except for `localhost` during development.… Local Server Security Model Context Protocol · in the page docs/draft/tutorials/security/local-server-security …o there is no boundary between the two processes for a transport to enforce. This is by design: the SDKs assume full trust between stdio peers, and any isolation or security fencing around a local ser… Security Best Practices Model Context Protocol · in the page docs/draft/tutorials/security/security_best_practices …tion ensures that consent approval at the authorization endpoint is enforced at the callback endpoint. MCP proxy servers implementing OAuth flows **MUST**: * Generate a cryptographically secure rand… Build an MCP App Model Context Protocol · in the page extensions/apps/build …``` ```powershell Windows theme={null} New-Item -ItemType Directory -Force -Path .claude\skills | Out-Null; Copy-Item -Recurse ext-apps\plugins\mcp-apps\skills\create-mcp-app .claude\skills\create-mc… MCP Apps Model Context Protocol · in the page extensions/apps/overview …frames, message passing, tool call proxying, and security policy enforcement. The [basic-host example](https://github.com/modelcontextprotocol/ext-apps/tree/main/examples/basic-host) shows ho… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …of every MCP server their organization uses * Security teams can't enforce consistent access policies if each user authorizes independently * Onboarding new employees requires them to manually author… Authorization Extensions Model Context Protocol · in the page extensions/auth/overview …nvironments** often have centralized identity providers (IdPs) that enforce policy across all applications. Requiring employees to authorize each MCP server individually creates friction and bypasses… MCP Registry Supported Package Types Model Context Protocol · in the page registry/package-types …support exists so Rust authors who prefer source distribution are not forced into the MCPB binary-packaging workaround. ### Ownership Verification The MCP Registry verifies ownership of Cargo packag… SEP-1024: MCP Client Security Requirements for Local Server Installation Model Context Protocol · in the page seps/1024-mcp-client-security-requirements-for-local-server- …ents silent execution of malicious commands * **Social Engineering**: Forces users to consciously review commands before execution * **Supply Chain Attacks**: Creates visibility into MCP server instal… SEP-1319: Decouple Request Payload from RPC Methods Definition Model Context Protocol · in the page seps/1319-decouple-request-payload-from-rpc-methods-definiti …. This design presents several challenges: * **Reduced Clarity:** It forces developers to mentally parse the JSON-RPC transport structure just to understand the core data being exchanged. This increa…