Client · Tokens

resource parameter on token requests

The client sends the RFC 8707 resource parameter identifying the MCP server on authorization and token requests.

mcp.client.resource-param

In revision 2026-07-28

Level
MUST
Defined in
Security Considerations › Token Audience Binding and ValidationMCP Authorization 2026-07-28
Party
Client
Observable
manual Requires reading documentation or source; recorded by people.

Client-side requirement: not shown in the server matrix. It is recorded so later tools can cite it.

Level by revision

RevisionLevelSection
2026-07-28currentMUSTSecurity Considerations › Token Audience Binding and Validation
2025-11-25MUSTSecurity Considerations › Token Audience Binding and Validation