Security Scopes

Security scopes are the explicit permission boundaries that govern what an MCP server is allowed to access or modify. Scopes may restrict file-system access to declared roots, network access to approved hosts, or API access to specific resource types. Host applications present scopes to users for approval at connection time, and well-designed clients refuse to forward tool results or resource reads that exceed the approved scope. Granular scopes limit blast radius if a server is compromised or manipulated via prompt injection.