Verified75% confidenceFactExact time
MCP's permission model draws on the OAuth 2.0 authorization code flow, requiring explicit user authorization for tool invocation.
5
Sources
75%
Confidence
Long-term
Relevance
7/22/2026
First Seen
Sources
Related Claims
UnverifiedMCP在Capability Discovery阶段需要声明所需操作权限，其权限声明机制借鉴了OAuth 2.0的Scope概念79% similarUnverifiedIn MCP's security design, tool invocations are stipulated to require explicit user authorization, and resource access is constrained by permission boundaries.77% similarUnverifiedIn MCP version 1.1 released by Anthropic in 2025, OAuth 2.1 authorization flows and tool permission scope declarations were introduced.75% similarUnverifiedThe MCP server has been updated to version 2.0, introducing the Mcp-Session-Id header to identify client sessions and adopting OAuth 2.1 as the recommended authentication framework.75% similarPartially VerifiedMCP对外公网服务支持基于OAuth 2.1授权框架和JWT的Token认证机制74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/587215API
curl https://kongchang.com/api/v1/knowledge/claims/587215MCP
get_claim(id=587215)