Search the documentation
30 pages for passthrough.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
User Profiles
Claude Developer Platform · in the page
api/beta/user_profiles
…13"` ### Body parameters - `access_type: optional "application" or "passthrough"` How the platform uses the API on behalf of the entity this profile represents. `application`: the platform sells…
Create User Profile
Claude Developer Platform · in the page
api/beta/user_profiles/create
…-13"` ## Body parameters - `access_type: optional "application" or "passthrough"` How the platform uses the API on behalf of the entity this profile represents. `application`: the platform sells…
List User Profiles
Claude Developer Platform · in the page
api/beta/user_profiles/list
…format: date-time - `access_type: optional "application" or "passthrough"` How the platform uses the API on behalf of the entity this profile represents. `application`: the platform sell…
Get User Profile
Claude Developer Platform · in the page
api/beta/user_profiles/retrieve
…format: date-time - `access_type: optional "application" or "passthrough"` How the platform uses the API on behalf of the entity this profile represents. `application`: the platform sell…
Update User Profile
Claude Developer Platform · in the page
api/beta/user_profiles/update
…-13"` ## Body parameters - `access_type: optional "application" or "passthrough" or null` How the platform uses the API on behalf of the entity this profile represents. `application`: the platfor…
Configure the sandboxed Bash tool
Claude Code CLI · in the page
sandboxing
…de v2.1.224 or later, relaxes this per form: setting a form's key to `passthrough` forwards the request with its placeholder-derived signature, so the calling tool receives AWS's own rejection respons…
Claude Code settings reference
Claude Code CLI · in the page
settings-reference
…sigv4a`, each one of: * `"deny"`: the proxy fails the request * `"passthrough"`: the proxy forwards the request signed with the masked placeholder, so the tool receives AWS's own rejection * **Def…
Configure your terminal for Claude Code
Claude Code CLI · in the page
terminal-config
…sion in your OS settings, and if you are running inside tmux, [enable passthrough](#configure-tmux). ### Play a sound with a Notification hook In any terminal you can configure a [Notification hook]…
Voice dictation
Claude Code CLI · in the page
voice-dictation
…re audio, for example a headless server, a remote shell with no audio passthrough, or a denied microphone permission. Confirm a working input device, fix the underlying cause from the entries above, t…
Deploy Claude Desktop on 3P with an LLM gateway
Claude Documentation · in the page
third-party/claude-desktop/gateway
…and fields; when it does not, requests fail with HTTP 400. LiteLLM in passthrough mode and Cloudflare AI Gateway both forward `anthropic-beta` headers and `tool_reference` content blocks. As a preflig…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-03-26/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/2025-03-26/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-06-18/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/2025-06-18/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-11-25/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/2025-11-25/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/draft/tutorials/security/authorization
…nt for it rather than some other API. This is key to help avoid token passthrough scenarios. To do this, open your `mcp:tools` client scope and click on **Mappers**, followed by **Configure a new map…
Security Best Practices
Model Context Protocol · in the page
docs/draft/tutorials/security/security_best_practices
…d bypass it by crafting a malicious authorization request. ### Token Passthrough "Token passthrough" is an anti-pattern where an MCP server accepts tokens from an MCP client without validating that…
SEP-1036: URL Mode Elicitation for secure out-of-band interactions
Model Context Protocol · in the page
seps/1036-url-mode-elicitation-for-secure-out-of-band-intera
…6-18/basic/security_best_practices) document explicitly forbids token passthrough, requiring a secure mechanism for external (3rd-party) OAuth flows. This was a particularly important motivating facto…
Authorization
Model Context Protocol · in the page
specification/2025-06-18/basic/authorization
…cument](/specification/2025-06-18/basic/security_best_practices#token-passthrough) outlines why token audience validation is crucial and why token passthrough is explicitly forbidden. ### Token Theft…
Authorization
Model Context Protocol · in the page
specification/2025-11-25/basic/authorization
…cument](/specification/2025-11-25/basic/security_best_practices#token-passthrough) outlines why token audience validation is crucial and why token passthrough is explicitly forbidden. ### Token Theft…
Elicitation
Model Context Protocol · in the page
specification/2025-11-25/client/elicitation
…ent's credentials for the third-party service**: That would be [token passthrough](../basic/security_best_practices#token-passthrough), which is forbidden 3. **The user MUST authorize the MCP server d…
Authorization Security Considerations
Model Context Protocol · in the page
specification/2026-07-28/basic/authorization/security-considerations
…nt](/docs/2026-07-28/tutorials/security/security_best_practices#token-passthrough) outlines why token audience validation is crucial and why token passthrough is explicitly forbidden. ## Token Theft…
Elicitation
Model Context Protocol · in the page
specification/2026-07-28/client/elicitation
…ent's credentials for the third-party service**: That would be [token passthrough](/docs/2026-07-28/tutorials/security/security_best_practices#token-passthrough), which is forbidden 3. **The user MUST…
Authorization Security Considerations
Model Context Protocol · in the page
specification/draft/basic/authorization/security-considerations
…ocument](/docs/draft/tutorials/security/security_best_practices#token-passthrough) outlines why token audience validation is crucial and why token passthrough is explicitly forbidden. ## Token Theft…
Elicitation
Model Context Protocol · in the page
specification/draft/client/elicitation
…ent's credentials for the third-party service**: That would be [token passthrough](/docs/draft/tutorials/security/security_best_practices#token-passthrough), which is forbidden 3. **The user MUST auth…