Resources
Readable data exposed by an MCP Server, selected by the application or the user and then injected into the context. Resources are usually read-only and serve to provide background information.
Core Facts
MCP defines three core primitives: Tools (tool invocation), Resources (resource reading), and Prompts (prompt templates).
The model decides when to invoke tools, the client or user chooses which resources to read, and prompts are usually triggered explicitly by the user; this division shapes permission design.
Timeline (last 90 days)
Although MCP Resources are read-only, they may dump hundreds of sensitive records into the model context at once, making them an easily overlooked data-leak surface; resources should be subject to the same permission checks and size limits as tools.
The model decides when to invoke tools, the client or user chooses which resources to read, and prompts are usually triggered explicitly by the user; this division shapes permission design.
A database schema is a typical Resource — it is context that an application can access directly via an address without needing to run any query
If a piece of content only needs to be read without triggering any logic execution, it should be a Resource
All Facts (5)
MCP defines three core primitives: Tools (tool invocation), Resources (resource reading), and Prompts (prompt templates).
90%VerifiedThe model decides when to invoke tools, the client or user chooses which resources to read, and prompts are usually triggered explicitly by the user; this division shapes permission design.
65%UnverifiedAlthough MCP Resources are read-only, they may dump hundreds of sensitive records into the model context at once, making them an easily overlooked data-leak surface; resources should be subject to the same permission checks and size limits as tools.
50%UnverifiedA database schema is a typical Resource — it is context that an application can access directly via an address without needing to run any query
50%UnverifiedIf a piece of content only needs to be read without triggering any logic execution, it should be a Resource
50%