| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:e8ec189a-3c16-391d-5c79-29df03f18fd4 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 86AC:1DBC44:43A6AC:619F92:6A58B375 |
| html-safe-nonce | bda5844247d9d5e4bd0570780c1c45a087814a261162c1609eca1060ae7fa375 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NkFDOjFEQkM0NDo0M0E2QUM6NjE5RjkyOjZBNThCMzc1IiwidmlzaXRvcl9pZCI6IjQwODI5NDY1NTUwNDQ3Mzc5MDkiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | c0805200327f20c8d54007002e096bfe18601b67885ca24115eabb3ca05cdfc6 |
| hovercard-subject-tag | pull_request:3355264794 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/modelcontextprotocol/modelcontextprotocol/2350/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/dcd69d5d92f0f11629e152344ca25a91d175bce0258118563901be8868382582/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/dcd69d5d92f0f11629e152344ca25a91d175bce0258118563901be8868382582/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| og:image:alt | Summary
Align server scope management in Runtime Insufficient Scope Errors with RFC 6750 Section 3.1 — servers report scopes needed for the current operation, not the union of previously granted s... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | dend |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5f2a0c7865178af3d91dd9f13b0cdfc3c73a2529c873d2780bb4c01271a57ec6 |
| turbo-cache-control | no-cache |
| go-import | github.com/modelcontextprotocol/modelcontextprotocol git https://github.com/modelcontextprotocol/modelcontextprotocol.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 862570523 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/modelcontextprotocol |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 862570523 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/modelcontextprotocol |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 8aae7b8d6caacacf5c66eaeb2702d8dc88d85b4a |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2350 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2350 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=modelcontextprotocol%2Fmodelcontextprotocol |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
|
modelcontextprotocol
| https://github.com/modelcontextprotocol |
| modelcontextprotocol | https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Notifications
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Fork
1.7k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Star
8.6k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
113
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
79
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
0
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
| mcp-commander[bot] | https://github.com/mcp-commander[bot] |
| main | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/main |
| den/scopes | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/den/scopes |
| Conversation | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| Commits5 (5) | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits |
| Checks | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/checks |
| Files changed | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files |
| SEP-2350: Clarify client-side scope accumulation in step-up authorization | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#top |
| mcp-commander[bot] | https://github.com/mcp-commander[bot] |
| main | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/main |
| den/scopes | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/den/scopes |
|
| https://github.com/dend |
| dend | https://github.com/dend |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issue-4024163719 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| RFC 6750 Section 3.1 | https://datatracker.ietf.org/doc/html/rfc6750#section-3.1 |
| #2349 | https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349 |
| Claude Code | https://claude.com/claude-code |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
|
| https://github.com/dend |
| docs: clarify client-side scope accumulation in step-up authorization | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/48164f3cac816ddb6072ed129efa5ffb80140fb6 |
| 48164f3 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/48164f3cac816ddb6072ed129efa5ffb80140fb6 |
| #2349 | https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349 |
| https://github.com/dend |
| dend | https://github.com/dend |
| code owner | https://github.com/modelcontextprotocol/modelcontextprotocol/blob/d7b83a4217d1b7cddb550c26f1b178d639fb5278/.github/CODEOWNERS#L11 |
| March 4, 2026 21:07 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273848465 |
| https://github.com/dend |
| dend | https://github.com/dend |
|
Mar 4, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4021825838 |
|
Clarify client-side scope accumulation behaviour during step-up authorization
#2349
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349 |
| https://github.com/dend |
| dend | https://github.com/dend |
|
auth
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth |
|
security
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273905254 |
| https://github.com/dend |
| dend | https://github.com/dend |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273926981 |
| https://github.com/dend |
| dend | https://github.com/dend |
|
SEP
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3ASEP |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273928851 |
| https://github.com/dend |
| dend | https://github.com/dend |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273929153 |
| https://github.com/apps/github-project-automation |
| github-project-automation | https://github.com/apps/github-project-automation |
| SEP Review Pipeline | https://github.com/orgs/modelcontextprotocol/projects/12 |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273930301 |
| https://github.com/dend |
| dend | https://github.com/dend |
|
draft
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Adraft |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23273932233 |
| https://github.com/dend |
| dend | https://github.com/dend |
| SEP Review Pipeline | https://github.com/orgs/modelcontextprotocol/projects/12 |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23274036404 |
| https://github.com/dend |
| dend | https://github.com/dend |
| 2026-06-30-RC | https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4 |
| Mar 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23274034447 |
| https://github.com/apps/mintlify |
| mintlify | https://github.com/apps/mintlify |
| deployed | https://mcp-staging-den-scopes.mintlify.app |
| staging - docs | https://mcp-staging-den-scopes.mintlify.app |
| March 4, 2026 21:16 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23274121476 |
| View deployment | https://mcp-staging-den-scopes.mintlify.app |
| https://github.com/asoorm |
| asoorm | https://github.com/asoorm |
| Mar 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4001193705 |
| @dend | https://github.com/dend |
| @localden | https://github.com/localden |
| wundergraph/cosmo#2438 | https://github.com/wundergraph/cosmo/pull/2438 |
| modelcontextprotocol/typescript-sdk#1604 | https://github.com/modelcontextprotocol/typescript-sdk/pull/1604 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/SamMorrowDrums |
| SamMorrowDrums | https://github.com/SamMorrowDrums |
| Mar 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4004172785 |
| @dend | https://github.com/dend |
| modelcontextprotocol/typescript-sdk#1624 | https://github.com/modelcontextprotocol/typescript-sdk/pull/1624 |
| @TylerLeonhardt | https://github.com/TylerLeonhardt |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Mar 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#pullrequestreview-3896659588 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/48164f3cac816ddb6072ed129efa5ffb80140fb6 |
| pcarleton | https://github.com/pcarleton |
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#pullrequestreview-3896659588 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| modelcontextprotocol/typescript-sdk#1604 | https://github.com/modelcontextprotocol/typescript-sdk/pull/1604 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/TylerLeonhardt |
| TylerLeonhardt | https://github.com/TylerLeonhardt |
| Mar 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4006733161 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/joshrotenberg |
| joshrotenberg | https://github.com/joshrotenberg |
|
Mar 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4030602030 |
|
[draft] SEP-2350/2351/2352: OAuth and authorization clarifications
joshrotenberg/tower-mcp#532
| https://github.com/joshrotenberg/tower-mcp/issues/532 |
| https://github.com/dend |
| dend | https://github.com/dend |
| Mar 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4008061549 |
| @TylerLeonhardt | https://github.com/TylerLeonhardt |
| @SamMorrowDrums | https://github.com/SamMorrowDrums |
| RFC 6750 Section 3 | https://www.rfc-editor.org/rfc/rfc6750.html#section-3 |
| @aaronpk | https://github.com/aaronpk |
| RFC 6750 | https://www.rfc-editor.org/rfc/rfc6750.html |
| RFC 9470 | https://www.rfc-editor.org/rfc/rfc9470.html |
| explicitly states | https://www.rfc-editor.org/rfc/rfc9470.html#name-protocol-overview |
| RFC 6749 | https://www.rfc-editor.org/rfc/rfc6749.html |
| another SEP | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2352 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/SamMorrowDrums |
| SamMorrowDrums | https://github.com/SamMorrowDrums |
| Mar 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4010933390 |
| @dend | https://github.com/dend |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/SamMorrowDrums |
| SamMorrowDrums | https://github.com/SamMorrowDrums |
| Mar 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4011143370 |
| modelcontextprotocol/typescript-sdk#1624 | https://github.com/modelcontextprotocol/typescript-sdk/pull/1624 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/asoorm |
| asoorm | https://github.com/asoorm |
| Mar 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4011166503 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://wundergraph.com/blog/mcp-scope-step-up-authorization | https://wundergraph.com/blog/mcp-scope-step-up-authorization |
| @SamMorrowDrums | https://github.com/SamMorrowDrums |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/localden |
| localden | https://github.com/localden |
| Mar 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4013209750 |
| @SamMorrowDrums | https://github.com/SamMorrowDrums |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/SamMorrowDrums |
| SamMorrowDrums | https://github.com/SamMorrowDrums |
| Mar 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4013830885 |
| @dend | https://github.com/dend |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
|
| https://github.com/localden |
| docs: add hierarchical scope note to step-up authorization flow | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/db9367d0b9a4ffee00833ebac6665c8969c91c23 |
| db9367d | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/db9367d0b9a4ffee00833ebac6665c8969c91c23 |
| @SamMorrowDrums | https://github.com/SamMorrowDrums |
| https://github.com/apps/mintlify |
| mintlify | https://github.com/apps/mintlify |
| deployed | https://mcp-staging-den-scopes.mintlify.app |
| staging - docs | https://mcp-staging-den-scopes.mintlify.app |
| March 7, 2026 19:34 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23362222725 |
| View deployment | https://mcp-staging-den-scopes.mintlify.app |
| https://github.com/localden |
| localden | https://github.com/localden |
| Mar 7, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4017184329 |
| @SamMorrowDrums | https://github.com/SamMorrowDrums |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
|
| https://github.com/localden |
| Merge branch 'main' into den/scopes | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/d5213f473a1dd91203ba6bb5a37fac76fa3f2b10 |
| d5213f4 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/commits/d5213f473a1dd91203ba6bb5a37fac76fa3f2b10 |
| https://github.com/apps/mintlify |
| mintlify | https://github.com/apps/mintlify |
| deployed | https://mcp-staging-den-scopes.mintlify.app |
| staging - docs | https://mcp-staging-den-scopes.mintlify.app |
| March 7, 2026 19:35 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-23362230568 |
| View deployment | https://mcp-staging-den-scopes.mintlify.app |
| https://github.com/SamMorrowDrums |
| SamMorrowDrums | https://github.com/SamMorrowDrums |
| Mar 7, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#issuecomment-4017264802 |
| @dend | https://github.com/dend |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| https://github.com/guglielmo-san |
| guglielmo-san | https://github.com/guglielmo-san |
|
May 6, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-pullrequest-4392598550 |
|
mcp: Add client-side scope accumulation
modelcontextprotocol/go-sdk#944
| https://github.com/modelcontextprotocol/go-sdk/pull/944 |
|
Conformance coverage for SEP-2350 (client-side scope accumulation in step-up auth)
modelcontextprotocol/conformance#281
| https://github.com/modelcontextprotocol/conformance/issues/281 |
|
SEP-2350: scope-accumulation check in auth/scope-step-up
modelcontextprotocol/conformance#282
| https://github.com/modelcontextprotocol/conformance/pull/282 |
| guglielmo-san | https://github.com/guglielmo-san |
|
May 18, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-commit-bf69179 |
|
| https://github.com/guglielmo-san |
|
| https://github.com/maciej-kisiel |
| mcp: Add client-side scope accumulation ( | https://github.com/modelcontextprotocol/go-sdk/commit/bf69179066780d95c1d5a748fc43ba8bd6be1ffa |
| #944 | https://github.com/modelcontextprotocol/go-sdk/pull/944 |
| ) | https://github.com/modelcontextprotocol/go-sdk/commit/bf69179066780d95c1d5a748fc43ba8bd6be1ffa |
| bf69179 | https://github.com/modelcontextprotocol/go-sdk/commit/bf69179066780d95c1d5a748fc43ba8bd6be1ffa |
| modelcontextprotocol/modelcontextprotocol#2350 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
| #943 | https://github.com/modelcontextprotocol/go-sdk/issues/943 |
| https://github.com/mikekistler |
| mikekistler | https://github.com/mikekistler |
|
May 20, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-pullrequest-4489561269 |
|
Implementation for SEP-2350 Client-side scope accumulation in step-up authorization
modelcontextprotocol/csharp-sdk#1591
| https://github.com/modelcontextprotocol/csharp-sdk/pull/1591 |
|
fix: accumulate OAuth scopes on 401/403 instead of overwriting
modelcontextprotocol/typescript-sdk#1657
| https://github.com/modelcontextprotocol/typescript-sdk/pull/1657 |
|
feat(server): OAuth scope challenge support (step-up auth)
modelcontextprotocol/typescript-sdk#1624
| https://github.com/modelcontextprotocol/typescript-sdk/pull/1624 |
| https://github.com/dogacancolak |
| dogacancolak | https://github.com/dogacancolak |
|
May 24, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-pullrequest-4513333034 |
|
SEP-2350: accumulate scopes on step-up auth
modelcontextprotocol/python-sdk#2676
| https://github.com/modelcontextprotocol/python-sdk/pull/2676 |
|
[2026-07-28] Authorization hardening (OAuth/OIDC)
modelcontextprotocol/php-sdk#338
| https://github.com/modelcontextprotocol/php-sdk/issues/338 |
|
[Server][Auth] SEP-2350: Emit per-operation scopes in insufficient_scope 403 responses (RFC 6750 §3.1)
modelcontextprotocol/php-sdk#362
| https://github.com/modelcontextprotocol/php-sdk/issues/362 |
|
[Client] Implement OAuth scope handling (WWW-Authenticate, scopes_supported, step-up, retry-limit, omitted)
modelcontextprotocol/php-sdk#322
| https://github.com/modelcontextprotocol/php-sdk/issues/322 |
| https://github.com/felixweinberger |
| felixweinberger | https://github.com/felixweinberger |
|
May 29, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4547542190 |
|
Implement SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/typescript-sdk#2200
| https://github.com/modelcontextprotocol/typescript-sdk/issues/2200 |
| https://github.com/alexhancock |
| alexhancock | https://github.com/alexhancock |
|
Jun 2, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4573027173 |
|
Implement SEP-2350: Clarify client-side scope accumulation (step-up auth)
modelcontextprotocol/rust-sdk#877
| https://github.com/modelcontextprotocol/rust-sdk/issues/877 |
| https://github.com/localden |
| localden | https://github.com/localden |
|
final
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal |
|
accepted
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aaccepted |
| Jun 4, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-26317913336 |
| https://github.com/stefanoamorelli |
| stefanoamorelli | https://github.com/stefanoamorelli |
|
Jun 4, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-pullrequest-4591033490 |
|
feat: accumulate client-side scopes during step-up authorization (SEP-2350)
modelcontextprotocol/rust-sdk#888
| https://github.com/modelcontextprotocol/rust-sdk/pull/888 |
| https://github.com/localden |
| localden | https://github.com/localden |
| 2026-07-28 Spec Implementation | https://github.com/orgs/modelcontextprotocol/projects/41 |
| Jun 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-26416911774 |
| https://github.com/apps/github-project-automation |
| github-project-automation | https://github.com/apps/github-project-automation |
| 2026-07-28 Spec Implementation | https://github.com/orgs/modelcontextprotocol/projects/41 |
| Jun 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-26416910284 |
| https://github.com/apps/github-project-automation |
| github-project-automation | https://github.com/apps/github-project-automation |
| 2026-07-28 Spec Implementation | https://github.com/orgs/modelcontextprotocol/projects/41 |
| Jun 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#event-26416910855 |
|
SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/java-sdk#1005
| https://github.com/modelcontextprotocol/java-sdk/issues/1005 |
|
Implement SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/kotlin-sdk#809
| https://github.com/modelcontextprotocol/kotlin-sdk/issues/809 |
|
Implement SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/python-sdk#2798
| https://github.com/modelcontextprotocol/python-sdk/issues/2798 |
|
SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/ruby-sdk#383
| https://github.com/modelcontextprotocol/ruby-sdk/issues/383 |
|
Implement SEP-2350: Clarify client-side scope accumulation in step-up authorization
modelcontextprotocol/swift-sdk#239
| https://github.com/modelcontextprotocol/swift-sdk/issues/239 |
|
(implementation): SEP-2350 - Clarify client-side scope accumulation in step-up authorization
#2878
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2878 |
| https://github.com/maxisbey |
| maxisbey | https://github.com/maxisbey |
|
Jun 17, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4682676338 |
|
Auth — 2026 client-side requirements
modelcontextprotocol/python-sdk#2902
| https://github.com/modelcontextprotocol/python-sdk/issues/2902 |
|
feat(client): SEP-2350 scope step-up — union, retry cap, superset-gated refresh bypass
modelcontextprotocol/typescript-sdk#2346
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2346 |
|
feat(client): SEP-2350 scope step-up — union, retry cap, superset-gated refresh bypass
modelcontextprotocol/typescript-sdk#2356
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2356 |
| https://github.com/BobDickinson |
| BobDickinson | https://github.com/BobDickinson |
|
Jun 26, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-issue-4749783948 |
|
[MCP 2026-07-28] Authorization hardening
modelcontextprotocol/inspector#1527
| https://github.com/modelcontextprotocol/inspector/issues/1527 |
| https://github.com/felixweinberger |
| felixweinberger | https://github.com/felixweinberger |
|
Jun 26, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350#ref-pullrequest-4650383987 |
|
Implement MCP 2026-07-28
modelcontextprotocol/typescript-sdk#2286
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2286 |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2350 |
|
| https://github.com/pcarleton |
|
pcarleton
| https://github.com/pcarleton |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/48164f3cac816ddb6072ed129efa5ffb80140fb6 |
|
| https://github.com/localden |
|
localden
| https://github.com/localden |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/d5213f473a1dd91203ba6bb5a37fac76fa3f2b10 |
|
| https://github.com/apps/mcp-commander |
|
mcp-commander[bot]
| https://github.com/apps/mcp-commander |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/029482b3ae85a8f9ced22adb9d51701752bafa2a |
|
| https://github.com/DavidParks8 |
|
DavidParks8
| https://github.com/DavidParks8 |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/d5213f473a1dd91203ba6bb5a37fac76fa3f2b10 |
|
| https://github.com/SamMorrowDrums |
|
SamMorrowDrums
| https://github.com/SamMorrowDrums |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350/files/029482b3ae85a8f9ced22adb9d51701752bafa2a |
|
| https://github.com/localden |
|
localden
| https://github.com/localden |
|
auth
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth |
|
final
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal |
|
security
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity |
|
SEP
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3ASEP |
|
2026-07-28 Spec Implementation
| https://github.com/orgs/modelcontextprotocol/projects/41 |
|
SEP Review Pipeline
| https://github.com/orgs/modelcontextprotocol/projects/12 |
|
2026-07-28-RC
| https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4 |
|
Clarify client-side scope accumulation behaviour during step-up authorization
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350 |
|
| https://github.com/dend |
|
| https://github.com/asoorm |
|
| https://github.com/SamMorrowDrums |
|
| https://github.com/TylerLeonhardt |
|
| https://github.com/localden |
|
| https://github.com/pcarleton |
|
| https://github.com/DavidParks8 |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |