Client · Authorization
Exact iss comparison
The client compares the iss value in the authorization response byte for byte with the expected issuer, without URL normalisation.
mcp.client.iss-compare-no-normalization
In revision 2026-07-28
- Level
- MUST
- Defined in
- Authorization › Authorization Response ValidationMCP Authorization 2026-07-28
- Party
- Client
- Observable
manualRequires reading documentation or source; recorded by people.
Client-side requirement: not shown in the server matrix. It is recorded so later tools can cite it.
Level by revision
| Revision | Level | Section |
|---|---|---|
| 2026-07-28current | MUST | Authorization › Authorization Response Validation |
| 2025-11-25 | not defined |