Unverified50% confidenceFactExact time
In MCP, tokens obtained by a client are scoped to a single server and carry a single, narrow permission.
1
Sources
50%
Confidence
Long-term
Relevance
10/10/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedA single MCP Host can simultaneously connect to multiple MCP Clients, with each Client interfacing with one Server to enable parallel invocation of multiple external capabilities.76% similarUnverifiedThe correct approach is for the MCP server to re-apply for a new dedicated token under its own identity when calling downstream services, rather than forwarding the incoming token.76% similarUnverifiedAn MCP server may only accept tokens issued for itself and must not forward client tokens to another API, as doing so would create a Confused Deputy vulnerability.75% similarUnverifiedThe design of MCP Server follows the principle of least privilege, with each Server exposing only the tools within its area of responsibility75% similarVerifiedMCP定义了一套通用的客户端-服务器通信规范，使任何遵循该协议的工具都能被任何支持MCP的大模型直接调用74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/994250API
curl https://kongchang.com/api/v1/knowledge/claims/994250MCP
get_claim(id=994250)