Roots

Roots are filesystem or URI boundaries that the host application declares to an MCP server at session initialization, indicating which locations the server is allowed to access. For example, a code editor might declare the open workspace directory as a root, telling the file-system MCP server to restrict all reads and writes within that path. Roots are a key security primitive: they give users and hosts fine-grained control over which data surfaces are exposed to each server.