Authorization server · Tokens

Resource indicators honoured

The authorization server accepts the RFC 8707 resource parameter and binds the audience of issued tokens to the requested MCP server.

mcp.as.resource-indicator

In revision 2026-07-28

Level
MUST Required for the audience binding that the MCP server must enforce.
Defined in
Security Considerations › Token Audience Binding and ValidationMCP Authorization 2026-07-28
Party
Authorization server
Observable
manual Requires reading documentation or source; recorded by people.

Level by revision

RevisionLevelSection
2026-07-28currentMUST Required for the audience binding that the MCP server must enforce.Security Considerations › Token Audience Binding and Validation
2025-11-25MUST Required for the audience binding that the MCP server must enforce.Security Considerations › Token Audience Binding and Validation

Adoption across listed servers

  • Supported1
  • Partial0
  • Unsupported0
  • Unknown33
  • Not applicable5