MCP server · Consent

Per-client consent on proxy servers

An MCP server that acts as a proxy with a static upstream client id obtains the user's consent for each dynamically registered client before forwarding.

mcp.proxy.consent

In revision 2026-07-28

Level
MUST
Defined in
Security Considerations › Confused Deputy ProblemMCP Authorization 2026-07-28
Party
MCP server
Observable
manual Requires reading documentation or source; recorded by people.

Level by revision

RevisionLevelSection
2026-07-28currentMUSTSecurity Considerations › Confused Deputy Problem
2025-11-25MUSTSecurity Considerations › Confused Deputy Problem

Adoption across listed servers

  • Supported3
  • Partial0
  • Unsupported0
  • Unknown31
  • Not applicable5