MCP authorization: Authorization (draft)
Provision mcp.06 · Model Context Protocol, Authorization (draft) · requirement
MCP clients SHOULD follow the principle of least privilege by requesting only the scopes necessary for their intended operations.
The text is as taken from the source. In the source: https://modelcontextprotocol.io/specification/draft/basic/authorization#scope-selection-strategy (the section of the specification that holds the requirement (its opening words were found there); linked 2026-11-10). The instrument: Model Context Protocol, Authorization (draft), the project's; requirements quoted with the source; read 2026-11-09.
Who cites it
| Indicator | The fact it asks for | Kind of link | The assertion |
|---|---|---|---|
I25 | It asks for narrower access than the whole account | same: evidenced | Asserted in the mapping by gamma-ray@web-summit.dinis; the written basis is not recorded yet. |
A link is our assertion, not the instrument's. "Same" carries the evidence to the provision in full. "Part" marks the provision as partly evidenced: the fact is one piece of what it asks. "Negation" points the other way.
The evidence that reaches it
| Card | Through | This provision is | The evidence | How far to trust it |
|---|---|---|---|---|
| AI Reviewer | I25 | evidenced | "Codacy might also create comments and suggestions on the pull request" Source | π Moderate · S1·R5·A1 ×3 |
| Claude Code on the web | I25 | evidenced | Source | π Moderate · S1·R5·A1 ×3 |
| Junie | I25 | evidenced | "permissions: contents: write pull-requests: write issues: write" Source | π Moderate · S1·R5·A1 ×3 |
| Noxus AI Workers | I25 | evidenced | "Select which database connection(s) the agent may query" Source | π Moderate · S1·R5·A1 ×3 |
| OutSystems Agent Workbench | I25 | evidenced | "You provide the agent with a set of available actions." Source | π Moderate · S1·R5·A1 ×3 |
| Replit Agent | I25 | evidenced | "control the exact scopes your builders can request" Source | π Moderate · S1·R5·A1 ×3 |
| Spinnable AI employees | I25 | evidenced | "When you connect a new account, Read is preselected" Source | π Moderate · S1·R5·A1 ×3 |
Touched never means complies.
Answer it directly
A company can answer this line item itself, in its own file at /.well-known/fact-ray.json, with the node gamma-ray:provision/mcp.06 (how). A company that already assesses itself against MCP authorization can reuse that work.