Unverified50% confidenceSolutionExact time
The design principle of this multi-tenant MCP server is: the model never handles access tokens and cannot choose which user it represents.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Building Multi-Tenant MCP Servers with OAuth: Secure Integration for Claude and ChatGPT
redditr/aiagents10/17/2026
Related Entities
Related Claims
UnverifiedIn MCP, tokens obtained by a client are scoped to a single server and carry a single, narrow permission.76% similarVerifiedThe design of MCP Server follows the principle of least privilege, with each Server exposing only the tools within its area of responsibility74% similarUnverifiedThe correct approach is for the MCP server to re-apply for a new dedicated token under its own identity when calling downstream services, rather than forwarding the incoming token.73% similarUnverifiedAn MCP server may only accept tokens issued for itself and must not forward client tokens to another API, as doing so would create a Confused Deputy vulnerability.72% similarUnverifiedMCP的设计中Server是被动的，不思考、不决策，只暴露工具等着被调用72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052718API
curl https://kongchang.com/api/v1/knowledge/claims/1052718MCP
get_claim(id=1052718)