hard20 pts · first answer countsai-agentsmcp

Passing the client token onward

Your MCP server receives a user's access token and forwards it unchanged to a downstream API. Why does the MCP spec forbid this?

A.Forwarding tokens makes requests too slow for any agentB.Downstream APIs cannot read tokens that came through MCPC.It must only accept tokens that were issued for itselfD.Tokens are only valid on the stdio transport, not HTTP

Discussion 0

Join free to post in the discussion.

Passing the client token onward

Discussion 0

Related questions