Unverified50% confidenceFactExact time
In the MCP authorization flow, when rejecting a request, the server explicitly informs the client of the specific permission scope (Scope) that needs to be applied for.
1
Sources
50%
Confidence
Long-term
Relevance
10/10/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen an MCP server cannot reliably identify the client making a request, any entity that can reach that service endpoint may obtain data or invoke tools under the guise of a legitimate client.79% similarUnverifiedMCP规范要求主机在运行任何工具之前必须先询问用户确认，强制保留人工介入环节74% similarUnverifiedMCP's interactive information collection (Elicitation) mechanism allows the system to directly request input or confirmation from the user when necessary information is missing while invoking a remote tool.73% similarUnverifiedCommon anti-patterns for MCP servers include excessive authorization, lack of request source validation, hardcoding sensitive credentials on the server side, and insufficient filtering of instructions passed in by agents.71% similarVerifiedThe Sampling mechanism in MCP allows a Server to request model inference from the client, making it a reverse invocation mechanism.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/994249API
curl https://kongchang.com/api/v1/knowledge/claims/994249MCP
get_claim(id=994249)