{ "title": "Local and Remote MCP Archive Claim Register", "schemaVersion": "1.0", "researchFreeze": "2026-08-26", "protocolRevision": "MCP 2026-07-28", "sourcePackage": "research/10", "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.", "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.", "checkedAt": "2026-08-26", "archiveCitationWarning": "Claim source IDs are withheld from canonical mapping.", "count": 137, "records": [ { "Claim ID": "C001", "Claim": "Current host, client and server architecture and logical relationships.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S001", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Architecture — MCP 2026-07-28", "id": "R10-CLAIM001", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 1, "sourceIds": [ "S001" ], "raw": { "Claim ID": "C001", "Claim": "Current host, client and server architecture and logical relationships.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S001", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Architecture — MCP 2026-07-28" } }, "packageClaimId": "C001" }, { "Claim ID": "C002", "Claim": "Transport is separate from protocol semantics; current standard bindings.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S002", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports Overview — MCP 2026-07-28", "id": "R10-CLAIM002", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 2, "sourceIds": [ "S002" ], "raw": { "Claim ID": "C002", "Claim": "Transport is separate from protocol semantics; current standard bindings.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S002", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports Overview — MCP 2026-07-28" } }, "packageClaimId": "C002" }, { "Claim ID": "C003", "Claim": "Subprocess lifecycle, newline-delimited JSON-RPC, stderr logging, cancellation, restart and compatibility.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S003", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "stdio — MCP 2026-07-28", "id": "R10-CLAIM003", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 3, "sourceIds": [ "S003" ], "raw": { "Claim ID": "C003", "Claim": "Subprocess lifecycle, newline-delimited JSON-RPC, stderr logging, cancellation, restart and compatibility.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S003", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "stdio — MCP 2026-07-28" } }, "packageClaimId": "C003" }, { "Claim ID": "C004", "Claim": "Single POST endpoint, request-scoped SSE, no protocol sessions, routing headers, local HTTP security.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S004", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Streamable HTTP — MCP 2026-07-28", "id": "R10-CLAIM004", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 4, "sourceIds": [ "S004" ], "raw": { "Claim ID": "C004", "Claim": "Single POST endpoint, request-scoped SSE, no protocol sessions, routing headers, local HTTP security.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S004", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Streamable HTTP — MCP 2026-07-28" } }, "packageClaimId": "C004" }, { "Claim ID": "C005", "Claim": "Optional HTTP authorization, OAuth roles, CIMD, resource indicators and stdio credential guidance.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S005", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2026-07-28", "id": "R10-CLAIM005", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 5, "sourceIds": [ "S005" ], "raw": { "Claim ID": "C005", "Claim": "Optional HTTP authorization, OAuth roles, CIMD, resource indicators and stdio credential guidance.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S005", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2026-07-28" } }, "packageClaimId": "C005" }, { "Claim ID": "C006", "Claim": "Removal of initialization and sessions, MRTR, caching, routing and deprecations.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S006", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Key Changes — MCP 2026-07-28", "id": "R10-CLAIM006", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 6, "sourceIds": [ "S006" ], "raw": { "Claim ID": "C006", "Claim": "Removal of initialization and sessions, MRTR, caching, routing and deprecations.", "Date range": "2026-07-28", "Protocol version": "2026-07-28", "Source IDs": "S006", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Key Changes — MCP 2026-07-28" } }, "packageClaimId": "C006" }, { "Claim ID": "C007", "Claim": "GA context and infrastructure rationale for stateless protocol processing.", "Date range": "2026-07-28", "Protocol version": "2026-07-28 GA", "Source IDs": "S007", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "The 2026-07-28 Specification Is Generally Available", "id": "R10-CLAIM007", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 7, "sourceIds": [ "S007" ], "raw": { "Claim ID": "C007", "Claim": "GA context and infrastructure rationale for stateless protocol processing.", "Date range": "2026-07-28", "Protocol version": "2026-07-28 GA", "Source IDs": "S007", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "The 2026-07-28 Specification Is Generally Available" } }, "packageClaimId": "C007" }, { "Claim ID": "C008", "Claim": "Motivation for removing sessions, horizontal scaling, explicit handles and HTTP infrastructure.", "Date range": "2026-05-29", "Protocol version": "2026-07-28 RC", "Source IDs": "S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "2026-07-28 Specification Release Candidate", "id": "R10-CLAIM008", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 8, "sourceIds": [ "S008" ], "raw": { "Claim ID": "C008", "Claim": "Motivation for removing sessions, horizontal scaling, explicit handles and HTTP infrastructure.", "Date range": "2026-05-29", "Protocol version": "2026-07-28 RC", "Source IDs": "S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "2026-07-28 Specification Release Candidate" } }, "packageClaimId": "C008" }, { "Claim ID": "C009", "Claim": "Original stdio and HTTP+SSE transport semantics.", "Date range": "2024-11-05", "Protocol version": "2024-11-05", "Source IDs": "S009", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2024-11-05", "id": "R10-CLAIM009", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 9, "sourceIds": [ "S009" ], "raw": { "Claim ID": "C009", "Claim": "Original stdio and HTTP+SSE transport semantics.", "Date range": "2024-11-05", "Protocol version": "2024-11-05", "Source IDs": "S009", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2024-11-05" } }, "packageClaimId": "C009" }, { "Claim ID": "C010", "Claim": "Original Streamable HTTP, handshake-era sessions and backward compatibility.", "Date range": "2025-03-26", "Protocol version": "2025-03-26", "Source IDs": "S010", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-03-26", "id": "R10-CLAIM010", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 10, "sourceIds": [ "S010" ], "raw": { "Claim ID": "C010", "Claim": "Original Streamable HTTP, handshake-era sessions and backward compatibility.", "Date range": "2025-03-26", "Protocol version": "2025-03-26", "Source IDs": "S010", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-03-26" } }, "packageClaimId": "C010" }, { "Claim ID": "C011", "Claim": "First MCP authorization framework and OAuth 2.1 relationship.", "Date range": "2025-03-26", "Protocol version": "2025-03-26", "Source IDs": "S011", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-03-26", "id": "R10-CLAIM011", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 11, "sourceIds": [ "S011" ], "raw": { "Claim ID": "C011", "Claim": "First MCP authorization framework and OAuth 2.1 relationship.", "Date range": "2025-03-26", "Protocol version": "2025-03-26", "Source IDs": "S011", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-03-26" } }, "packageClaimId": "C011" }, { "Claim ID": "C012", "Claim": "Mid-2025 Streamable HTTP transport, sessions and version header.", "Date range": "2025-06-18", "Protocol version": "2025-06-18", "Source IDs": "S012", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-06-18", "id": "R10-CLAIM012", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 12, "sourceIds": [ "S012" ], "raw": { "Claim ID": "C012", "Claim": "Mid-2025 Streamable HTTP transport, sessions and version header.", "Date range": "2025-06-18", "Protocol version": "2025-06-18", "Source IDs": "S012", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-06-18" } }, "packageClaimId": "C012" }, { "Claim ID": "C013", "Claim": "Resource-server classification, protected resource metadata and resource indicators.", "Date range": "2025-06-18", "Protocol version": "2025-06-18", "Source IDs": "S013", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-06-18", "id": "R10-CLAIM013", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 13, "sourceIds": [ "S013" ], "raw": { "Claim ID": "C013", "Claim": "Resource-server classification, protected resource metadata and resource indicators.", "Date range": "2025-06-18", "Protocol version": "2025-06-18", "Source IDs": "S013", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-06-18" } }, "packageClaimId": "C013" }, { "Claim ID": "C014", "Claim": "Last handshake-era transport semantics before the 2026 architecture.", "Date range": "2025-11-25", "Protocol version": "2025-11-25", "Source IDs": "S014", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-11-25", "id": "R10-CLAIM014", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 14, "sourceIds": [ "S014" ], "raw": { "Claim ID": "C014", "Claim": "Last handshake-era transport semantics before the 2026 architecture.", "Date range": "2025-11-25", "Protocol version": "2025-11-25", "Source IDs": "S014", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Transports — MCP 2025-11-25" } }, "packageClaimId": "C014" }, { "Claim ID": "C015", "Claim": "OIDC discovery, CIMD and late-2025 remote authorization model.", "Date range": "2025-11-25", "Protocol version": "2025-11-25", "Source IDs": "S015", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-11-25", "id": "R10-CLAIM015", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 15, "sourceIds": [ "S015" ], "raw": { "Claim ID": "C015", "Claim": "OIDC discovery, CIMD and late-2025 remote authorization model.", "Date range": "2025-11-25", "Protocol version": "2025-11-25", "Source IDs": "S015", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Authorization — MCP 2025-11-25" } }, "packageClaimId": "C015" }, { "Claim ID": "C016", "Claim": "Current MCP security guidance across transports, authorization and local server trust.", "Date range": "2026-07-28", "Protocol version": "Current guidance", "Source IDs": "S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Security Best Practices", "id": "R10-CLAIM016", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 16, "sourceIds": [ "S016" ], "raw": { "Claim ID": "C016", "Claim": "Current MCP security guidance across transports, authorization and local server trust.", "Date range": "2026-07-28", "Protocol version": "Current guidance", "Source IDs": "S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Security Best Practices" } }, "packageClaimId": "C016" }, { "Claim ID": "C017", "Claim": "Streamable HTTP recommended for remote servers, stdio for local spawned integrations, legacy SSE deprecated.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S017", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP TypeScript SDK — Server", "id": "R10-CLAIM017", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 17, "sourceIds": [ "S017" ], "raw": { "Claim ID": "C017", "Claim": "Streamable HTTP recommended for remote servers, stdio for local spawned integrations, legacy SSE deprecated.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S017", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP TypeScript SDK — Server" } }, "packageClaimId": "C017" }, { "Claim ID": "C018", "Claim": "Modern probing, legacy fallback and dual-era behavior.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S018", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP TypeScript SDK — Protocol Versions", "id": "R10-CLAIM018", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 18, "sourceIds": [ "S018" ], "raw": { "Claim ID": "C018", "Claim": "Modern probing, legacy fallback and dual-era behavior.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S018", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP TypeScript SDK — Protocol Versions" } }, "packageClaimId": "C018" }, { "Claim ID": "C019", "Claim": "Remote connector for cloud/SaaS and all surfaces; desktop extension for local files, localhost, OS access.", "Date range": "2026-04-15", "Protocol version": "Current product guidance", "Source IDs": "S019", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "When to Use Desktop and Web Connectors", "id": "R10-CLAIM019", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 19, "sourceIds": [ "S019" ], "raw": { "Claim ID": "C019", "Claim": "Remote connector for cloud/SaaS and all surfaces; desktop extension for local files, localhost, OS access.", "Date range": "2026-04-15", "Protocol version": "Current product guidance", "Source IDs": "S019", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "When to Use Desktop and Web Connectors" } }, "packageClaimId": "C019" }, { "Claim ID": "C020", "Claim": "MCPB local bundle characteristics, stdio, bundled dependencies, offline use and no OAuth requirement.", "Date range": "2026-03-16", "Protocol version": "Current MCPB guidance", "Source IDs": "S020", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Building Desktop Extensions with MCPB", "id": "R10-CLAIM020", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 20, "sourceIds": [ "S020" ], "raw": { "Claim ID": "C020", "Claim": "MCPB local bundle characteristics, stdio, bundled dependencies, offline use and no OAuth requirement.", "Date range": "2026-03-16", "Protocol version": "Current MCPB guidance", "Source IDs": "S020", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Building Desktop Extensions with MCPB" } }, "packageClaimId": "C020" }, { "Claim ID": "C021", "Claim": "Local desktop extension installation, runtimes, sensitive config storage and admin controls.", "Date range": "2026-06-30", "Protocol version": "Current product guidance", "Source IDs": "S021", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Get Started with Local MCP Servers in Claude Desktop", "id": "R10-CLAIM021", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 21, "sourceIds": [ "S021" ], "raw": { "Claim ID": "C021", "Claim": "Local desktop extension installation, runtimes, sensitive config storage and admin controls.", "Date range": "2026-06-30", "Protocol version": "Current product guidance", "Source IDs": "S021", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Get Started with Local MCP Servers in Claude Desktop" } }, "packageClaimId": "C021" }, { "Claim ID": "C022", "Claim": "Remote connection origination, private network allowlisting and remote connector behavior.", "Date range": "2026-08-26", "Protocol version": "Current product guidance", "Source IDs": "S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Get Started with Custom Connectors Using Remote MCP", "id": "R10-CLAIM022", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 22, "sourceIds": [ "S022" ], "raw": { "Claim ID": "C022", "Claim": "Remote connection origination, private network allowlisting and remote connector behavior.", "Date range": "2026-08-26", "Protocol version": "Current product guidance", "Source IDs": "S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Get Started with Custom Connectors Using Remote MCP" } }, "packageClaimId": "C022" }, { "Claim ID": "C023", "Claim": "Local access to internal/on-prem systems, local resources and enterprise controls.", "Date range": "2026-08-26", "Protocol version": "Current enterprise guidance", "Source IDs": "S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Deploying Enterprise-Grade MCP Servers with Desktop Extensions", "id": "R10-CLAIM023", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 23, "sourceIds": [ "S023" ], "raw": { "Claim ID": "C023", "Claim": "Local access to internal/on-prem systems, local resources and enterprise controls.", "Date range": "2026-08-26", "Protocol version": "Current enterprise guidance", "Source IDs": "S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Deploying Enterprise-Grade MCP Servers with Desktop Extensions" } }, "packageClaimId": "C023" }, { "Claim ID": "C024", "Claim": "Claude Code supports local stdio, remote HTTP/SSE and OAuth.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S024", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Claude Code MCP Documentation", "id": "R10-CLAIM024", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 24, "sourceIds": [ "S024" ], "raw": { "Claim ID": "C024", "Claim": "Claude Code supports local stdio, remote HTTP/SSE and OAuth.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S024", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Claude Code MCP Documentation" } }, "packageClaimId": "C024" }, { "Claim ID": "C025", "Claim": "Messages API connector requires public remote HTTP and does not directly support local stdio.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S025", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP Connector in the Messages API", "id": "R10-CLAIM025", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 25, "sourceIds": [ "S025" ], "raw": { "Claim ID": "C025", "Claim": "Messages API connector requires public remote HTTP and does not directly support local stdio.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S025", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP Connector in the Messages API" } }, "packageClaimId": "C025" }, { "Claim ID": "C026", "Claim": "ChatGPT connects directly to remote MCP servers; Secure MCP Tunnel for local/private/on-prem servers.", "Date range": "2026-08-25", "Protocol version": "Current product docs", "Source IDs": "S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Developer Mode and MCP Apps in ChatGPT", "id": "R10-CLAIM026", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 26, "sourceIds": [ "S026" ], "raw": { "Claim ID": "C026", "Claim": "ChatGPT connects directly to remote MCP servers; Secure MCP Tunnel for local/private/on-prem servers.", "Date range": "2026-08-25", "Protocol version": "Current product docs", "Source IDs": "S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Developer Mode and MCP Apps in ChatGPT" } }, "packageClaimId": "C026" }, { "Claim ID": "C027", "Claim": "VS Code local/remote configuration, trust prompts, local sandboxing and remote placement.", "Date range": "2026-08-20", "Protocol version": "Current product docs", "Source IDs": "S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Add and Manage MCP Servers in VS Code", "id": "R10-CLAIM027", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 27, "sourceIds": [ "S027" ], "raw": { "Claim ID": "C027", "Claim": "VS Code local/remote configuration, trust prompts, local sandboxing and remote placement.", "Date range": "2026-08-20", "Protocol version": "Current product docs", "Source IDs": "S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Add and Manage MCP Servers in VS Code" } }, "packageClaimId": "C027" }, { "Claim ID": "C028", "Claim": "Cursor stdio, SSE and Streamable HTTP support and deployment distinctions.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol (MCP)", "id": "R10-CLAIM028", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 28, "sourceIds": [ "S028" ], "raw": { "Claim ID": "C028", "Claim": "Cursor stdio, SSE and Streamable HTTP support and deployment distinctions.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol (MCP)" } }, "packageClaimId": "C028" }, { "Claim ID": "C029", "Claim": "Cloud agents support HTTP and stdio with different credential exposure and proxy behavior.", "Date range": "2026-08-24", "Protocol version": "Current cloud-agent docs", "Source IDs": "S029", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Cloud Agent Capabilities", "id": "R10-CLAIM029", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 29, "sourceIds": [ "S029" ], "raw": { "Claim ID": "C029", "Claim": "Cloud agents support HTTP and stdio with different credential exposure and proxy behavior.", "Date range": "2026-08-24", "Protocol version": "Current cloud-agent docs", "Source IDs": "S029", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Cloud Agent Capabilities" } }, "packageClaimId": "C029" }, { "Claim ID": "C030", "Claim": "JetBrains stdio, Streamable HTTP, legacy SSE and local Docker patterns.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S030", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol in JetBrains AI Assistant", "id": "R10-CLAIM030", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 30, "sourceIds": [ "S030" ], "raw": { "Claim ID": "C030", "Claim": "JetBrains stdio, Streamable HTTP, legacy SSE and local Docker patterns.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S030", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol in JetBrains AI Assistant" } }, "packageClaimId": "C030" }, { "Claim ID": "C031", "Claim": "Gemini CLI local command and remote HTTP/SSE configuration plus OAuth.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S031", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Gemini CLI MCP Server Integration", "id": "R10-CLAIM031", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 31, "sourceIds": [ "S031" ], "raw": { "Claim ID": "C031", "Claim": "Gemini CLI local command and remote HTTP/SSE configuration plus OAuth.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S031", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Gemini CLI MCP Server Integration" } }, "packageClaimId": "C031" }, { "Claim ID": "C032", "Claim": "Goose extension model and local/remote MCP usage.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S032", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Goose Extensions", "id": "R10-CLAIM032", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 32, "sourceIds": [ "S032" ], "raw": { "Claim ID": "C032", "Claim": "Goose extension model and local/remote MCP usage.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S032", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Goose Extensions" } }, "packageClaimId": "C032" }, { "Claim ID": "C033", "Claim": "Zed MCP server configuration and transport support.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S033", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Zed Context Servers", "id": "R10-CLAIM033", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 33, "sourceIds": [ "S033" ], "raw": { "Claim ID": "C033", "Claim": "Zed MCP server configuration and transport support.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S033", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Zed Context Servers" } }, "packageClaimId": "C033" }, { "Claim ID": "C034", "Claim": "Cloudflare distinction between remote Streamable HTTP/OAuth and local stdio.", "Date range": "2026-08-25", "Protocol version": "Current cloud docs", "Source IDs": "S034", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol", "id": "R10-CLAIM034", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 34, "sourceIds": [ "S034" ], "raw": { "Claim ID": "C034", "Claim": "Cloudflare distinction between remote Streamable HTTP/OAuth and local stdio.", "Date range": "2026-08-25", "Protocol version": "Current cloud docs", "Source IDs": "S034", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Model Context Protocol" } }, "packageClaimId": "C034" }, { "Claim ID": "C035", "Claim": "Stateless/legacy handlers, deployment, authless and OAuth patterns.", "Date range": "2026-07-27", "Protocol version": "Current cloud docs", "Source IDs": "S035", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build a Remote MCP Server", "id": "R10-CLAIM035", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 35, "sourceIds": [ "S035" ], "raw": { "Claim ID": "C035", "Claim": "Stateless/legacy handlers, deployment, authless and OAuth patterns.", "Date range": "2026-07-27", "Protocol version": "Current cloud docs", "Source IDs": "S035", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build a Remote MCP Server" } }, "packageClaimId": "C035" }, { "Claim ID": "C036", "Claim": "Managed remote servers, OAuth, current 2026 specification support and legacy aliases.", "Date range": "2026-07-28", "Protocol version": "Current managed servers", "Source IDs": "S036", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Cloudflare’s Own MCP Servers", "id": "R10-CLAIM036", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 36, "sourceIds": [ "S036" ], "raw": { "Claim ID": "C036", "Claim": "Managed remote servers, OAuth, current 2026 specification support and legacy aliases.", "Date range": "2026-07-28", "Protocol version": "Current managed servers", "Source IDs": "S036", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Cloudflare’s Own MCP Servers" } }, "packageClaimId": "C036" }, { "Claim ID": "C037", "Claim": "Central policy, identity, scope, audit and vendor preference for managed remote MCP.", "Date range": "2026-08-26", "Protocol version": "Current enterprise docs", "Source IDs": "S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP Governance", "id": "R10-CLAIM037", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 37, "sourceIds": [ "S037" ], "raw": { "Claim ID": "C037", "Claim": "Central policy, identity, scope, audit and vendor preference for managed remote MCP.", "Date range": "2026-08-26", "Protocol version": "Current enterprise docs", "Source IDs": "S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCP Governance" } }, "packageClaimId": "C037" }, { "Claim ID": "C038", "Claim": "Client-side remote OAuth flow and durable OAuth state.", "Date range": "2026-06-03", "Protocol version": "Current cloud docs", "Source IDs": "S038", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Handle OAuth with MCP Servers", "id": "R10-CLAIM038", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 38, "sourceIds": [ "S038" ], "raw": { "Claim ID": "C038", "Claim": "Client-side remote OAuth flow and durable OAuth state.", "Date range": "2026-06-03", "Protocol version": "Current cloud docs", "Source IDs": "S038", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Handle OAuth with MCP Servers" } }, "packageClaimId": "C038" }, { "Claim ID": "C039", "Claim": "Current Cloud Run hosting guidance for remote MCP servers.", "Date range": "2026-08-24", "Protocol version": "Current cloud docs", "Source IDs": "S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Host MCP Servers on Cloud Run", "id": "R10-CLAIM039", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 39, "sourceIds": [ "S039" ], "raw": { "Claim ID": "C039", "Claim": "Current Cloud Run hosting guidance for remote MCP servers.", "Date range": "2026-08-24", "Protocol version": "Current cloud docs", "Source IDs": "S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Host MCP Servers on Cloud Run" } }, "packageClaimId": "C039" }, { "Claim ID": "C040", "Claim": "Consuming Cloud Run remote MCP and authenticated service access.", "Date range": "2026-08-19", "Protocol version": "Current cloud docs", "Source IDs": "S040", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Use the Cloud Run Remote MCP Server", "id": "R10-CLAIM040", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 40, "sourceIds": [ "S040" ], "raw": { "Claim ID": "C040", "Claim": "Consuming Cloud Run remote MCP and authenticated service access.", "Date range": "2026-08-19", "Protocol version": "Current cloud docs", "Source IDs": "S040", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Use the Cloud Run Remote MCP Server" } }, "packageClaimId": "C040" }, { "Claim ID": "C041", "Claim": "Containerized remote deployment, managed scaling and centralized operation.", "Date range": "2026-08-26", "Protocol version": "Current cloud tutorial", "Source IDs": "S041", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build and Deploy a Remote MCP Server to Cloud Run", "id": "R10-CLAIM041", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 41, "sourceIds": [ "S041" ], "raw": { "Claim ID": "C041", "Claim": "Containerized remote deployment, managed scaling and centralized operation.", "Date range": "2026-08-26", "Protocol version": "Current cloud tutorial", "Source IDs": "S041", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build and Deploy a Remote MCP Server to Cloud Run" } }, "packageClaimId": "C041" }, { "Claim ID": "C042", "Claim": "Remote MCP security, identity, private connectivity and audit architecture.", "Date range": "2026-08-26", "Protocol version": "Current architecture", "Source IDs": "S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure Remote MCP Server Reference Architecture", "id": "R10-CLAIM042", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 42, "sourceIds": [ "S042" ], "raw": { "Claim ID": "C042", "Claim": "Remote MCP security, identity, private connectivity and audit architecture.", "Date range": "2026-08-26", "Protocol version": "Current architecture", "Source IDs": "S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure Remote MCP Server Reference Architecture" } }, "packageClaimId": "C042" }, { "Claim ID": "C043", "Claim": "Gateway support for modern and legacy MCP revisions, endpoints and identity.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S043", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Amazon Bedrock AgentCore Gateway MCP Support", "id": "R10-CLAIM043", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 43, "sourceIds": [ "S043" ], "raw": { "Claim ID": "C043", "Claim": "Gateway support for modern and legacy MCP revisions, endpoints and identity.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S043", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Amazon Bedrock AgentCore Gateway MCP Support" } }, "packageClaimId": "C043" }, { "Claim ID": "C044", "Claim": "AWS local-versus-remote deployment guidance and use cases.", "Date range": "2026-08-26", "Protocol version": "Current project docs", "Source IDs": "S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Open Source MCP Servers for AWS", "id": "R10-CLAIM044", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 44, "sourceIds": [ "S044" ], "raw": { "Claim ID": "C044", "Claim": "AWS local-versus-remote deployment guidance and use cases.", "Date range": "2026-08-26", "Protocol version": "Current project docs", "Source IDs": "S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Open Source MCP Servers for AWS" } }, "packageClaimId": "C044" }, { "Claim ID": "C045", "Claim": "Self-hosted remote MCP, Streamable HTTP and serverless deployment.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S045", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Azure Functions MCP Trigger", "id": "R10-CLAIM045", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 45, "sourceIds": [ "S045" ], "raw": { "Claim ID": "C045", "Claim": "Self-hosted remote MCP, Streamable HTTP and serverless deployment.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S045", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Azure Functions MCP Trigger" } }, "packageClaimId": "C045" }, { "Claim ID": "C046", "Claim": "Remote server deployment and Microsoft Entra authorization.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S046", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Azure Functions Remote MCP Tutorial", "id": "R10-CLAIM046", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 46, "sourceIds": [ "S046" ], "raw": { "Claim ID": "C046", "Claim": "Remote server deployment and Microsoft Entra authorization.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S046", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Azure Functions Remote MCP Tutorial" } }, "packageClaimId": "C046" }, { "Claim ID": "C047", "Claim": "Official local self-managed versus Microsoft-hosted remote comparison.", "Date range": "2026-07-01", "Protocol version": "Current product docs", "Source IDs": "S047", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Fabric Real-Time Intelligence Local and Remote MCP Servers", "id": "R10-CLAIM047", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 47, "sourceIds": [ "S047" ], "raw": { "Claim ID": "C047", "Claim": "Official local self-managed versus Microsoft-hosted remote comparison.", "Date range": "2026-07-01", "Protocol version": "Current product docs", "Source IDs": "S047", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Fabric Real-Time Intelligence Local and Remote MCP Servers" } }, "packageClaimId": "C047" }, { "Claim ID": "C048", "Claim": "Reference-server distribution, local examples and warning that examples are not production-ready.", "Date range": "2026-08-26", "Protocol version": "Current repository", "Source IDs": "S048", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Official Reference Servers Repository", "id": "R10-CLAIM048", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 48, "sourceIds": [ "S048" ], "raw": { "Claim ID": "C048", "Claim": "Reference-server distribution, local examples and warning that examples are not production-ready.", "Date range": "2026-08-26", "Protocol version": "Current repository", "Source IDs": "S048", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Official Reference Servers Repository" } }, "packageClaimId": "C048" }, { "Claim ID": "C049", "Claim": "MCP Bundle manifest, packaging and local distribution.", "Date range": "2026-08-26", "Protocol version": "Current repository", "Source IDs": "S049", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCPB Repository", "id": "R10-CLAIM049", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 49, "sourceIds": [ "S049" ], "raw": { "Claim ID": "C049", "Claim": "MCP Bundle manifest, packaging and local distribution.", "Date range": "2026-08-26", "Protocol version": "Current repository", "Source IDs": "S049", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "MCPB Repository" } }, "packageClaimId": "C049" }, { "Claim ID": "C050", "Claim": "Registry launch, metadata discovery and distribution distinction.", "Date range": "2025-09-08", "Protocol version": "Registry preview", "Source IDs": "S050", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Official MCP Registry Preview", "id": "R10-CLAIM050", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 50, "sourceIds": [ "S050" ], "raw": { "Claim ID": "C050", "Claim": "Registry launch, metadata discovery and distribution distinction.", "Date range": "2025-09-08", "Protocol version": "Registry preview", "Source IDs": "S050", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Official MCP Registry Preview" } }, "packageClaimId": "C050" }, { "Claim ID": "C051", "Claim": "Registry metadata, namespace verification and security limitations.", "Date range": "2026-08-26", "Protocol version": "Current registry docs", "Source IDs": "S051", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Registry About and Security Model", "id": "R10-CLAIM051", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 51, "sourceIds": [ "S051" ], "raw": { "Claim ID": "C051", "Claim": "Registry metadata, namespace verification and security limitations.", "Date range": "2026-08-26", "Protocol version": "Current registry docs", "Source IDs": "S051", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Registry About and Security Model" } }, "packageClaimId": "C051" }, { "Claim ID": "C052", "Claim": "OAuth security best current practice.", "Date range": "2025-01", "Protocol version": "RFC 9700", "Source IDs": "S052", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Best Current Practice for OAuth 2.0 Security", "id": "R10-CLAIM052", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 52, "sourceIds": [ "S052" ], "raw": { "Claim ID": "C052", "Claim": "OAuth security best current practice.", "Date range": "2025-01", "Protocol version": "RFC 9700", "Source IDs": "S052", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Best Current Practice for OAuth 2.0 Security" } }, "packageClaimId": "C052" }, { "Claim ID": "C053", "Claim": "Protected resource metadata used in remote MCP authorization.", "Date range": "2025-04", "Protocol version": "RFC 9728", "Source IDs": "S053", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Protected Resource Metadata", "id": "R10-CLAIM053", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 53, "sourceIds": [ "S053" ], "raw": { "Claim ID": "C053", "Claim": "Protected resource metadata used in remote MCP authorization.", "Date range": "2025-04", "Protocol version": "RFC 9728", "Source IDs": "S053", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Protected Resource Metadata" } }, "packageClaimId": "C053" }, { "Claim ID": "C054", "Claim": "Resource-bound token requests and audience restrictions.", "Date range": "2020-02", "Protocol version": "RFC 8707", "Source IDs": "S054", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Resource Indicators for OAuth 2.0", "id": "R10-CLAIM054", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 54, "sourceIds": [ "S054" ], "raw": { "Claim ID": "C054", "Claim": "Resource-bound token requests and audience restrictions.", "Date range": "2020-02", "Protocol version": "RFC 8707", "Source IDs": "S054", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Resource Indicators for OAuth 2.0" } }, "packageClaimId": "C054" }, { "Claim ID": "C055", "Claim": "Issuer identification and mix-up mitigation.", "Date range": "2022-03", "Protocol version": "RFC 9207", "Source IDs": "S055", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Authorization Server Issuer Identification", "id": "R10-CLAIM055", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 55, "sourceIds": [ "S055" ], "raw": { "Claim ID": "C055", "Claim": "Issuer identification and mix-up mitigation.", "Date range": "2022-03", "Protocol version": "RFC 9207", "Source IDs": "S055", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Authorization Server Issuer Identification" } }, "packageClaimId": "C055" }, { "Claim ID": "C056", "Claim": "PKCE for public clients.", "Date range": "2015-09", "Protocol version": "RFC 7636", "Source IDs": "S056", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Proof Key for Code Exchange by OAuth Public Clients", "id": "R10-CLAIM056", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 56, "sourceIds": [ "S056" ], "raw": { "Claim ID": "C056", "Claim": "PKCE for public clients.", "Date range": "2015-09", "Protocol version": "RFC 7636", "Source IDs": "S056", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Proof Key for Code Exchange by OAuth Public Clients" } }, "packageClaimId": "C056" }, { "Claim ID": "C057", "Claim": "Bearer-token handling and disclosure risks.", "Date range": "2012-10", "Protocol version": "RFC 6750", "Source IDs": "S057", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Bearer Token Usage", "id": "R10-CLAIM057", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 57, "sourceIds": [ "S057" ], "raw": { "Claim ID": "C057", "Claim": "Bearer-token handling and disclosure risks.", "Date range": "2012-10", "Protocol version": "RFC 6750", "Source IDs": "S057", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "OAuth 2.0 Bearer Token Usage" } }, "packageClaimId": "C057" }, { "Claim ID": "C058", "Claim": "Localhost HTTP mode can create remote website access without host/origin protection.", "Date range": "2025-12-02", "Protocol version": "Affected SDK versions", "Source IDs": "S058", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-66414: DNS Rebinding Protection Disabled by Default", "id": "R10-CLAIM058", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 58, "sourceIds": [ "S058" ], "raw": { "Claim ID": "C058", "Claim": "Localhost HTTP mode can create remote website access without host/origin protection.", "Date range": "2025-12-02", "Protocol version": "Affected SDK versions", "Source IDs": "S058", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-66414: DNS Rebinding Protection Disabled by Default" } }, "packageClaimId": "C058" }, { "Claim ID": "C059", "Claim": "Local HTTP deployment security risk in Python SDK defaults.", "Date range": "2025-12-02", "Protocol version": "Affected SDK versions", "Source IDs": "S059", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-66416: DNS Rebinding Protection Disabled by Default", "id": "R10-CLAIM059", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 59, "sourceIds": [ "S059" ], "raw": { "Claim ID": "C059", "Claim": "Local HTTP deployment security risk in Python SDK defaults.", "Date range": "2025-12-02", "Protocol version": "Affected SDK versions", "Source IDs": "S059", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-66416: DNS Rebinding Protection Disabled by Default" } }, "packageClaimId": "C059" }, { "Claim ID": "C060", "Claim": "Localhost HTTP servers require origin and host protections across SDKs.", "Date range": "2026-02-20", "Protocol version": "Affected SDK versions", "Source IDs": "S060", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-34742: DNS Rebinding Protection Gap", "id": "R10-CLAIM060", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 60, "sourceIds": [ "S060" ], "raw": { "Claim ID": "C060", "Claim": "Localhost HTTP servers require origin and host protections across SDKs.", "Date range": "2026-02-20", "Protocol version": "Affected SDK versions", "Source IDs": "S060", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-34742: DNS Rebinding Protection Gap" } }, "packageClaimId": "C060" }, { "Claim ID": "C061", "Claim": "Local HTTP is a network boundary even when bound near the user.", "Date range": "2026-02-26", "Protocol version": "Affected SDK versions", "Source IDs": "S061", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-35568: DNS Rebinding Protection Gap", "id": "R10-CLAIM061", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 61, "sourceIds": [ "S061" ], "raw": { "Claim ID": "C061", "Claim": "Local HTTP is a network boundary even when bound near the user.", "Date range": "2026-02-26", "Protocol version": "Affected SDK versions", "Source IDs": "S061", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-35568: DNS Rebinding Protection Gap" } }, "packageClaimId": "C061" }, { "Claim ID": "C062", "Claim": "Cross-SDK history of localhost HTTP rebinding issues.", "Date range": "2026-06-08", "Protocol version": "Affected SDK versions", "Source IDs": "S062", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-63118: DNS Rebinding Protection Gap", "id": "R10-CLAIM062", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 62, "sourceIds": [ "S062" ], "raw": { "Claim ID": "C062", "Claim": "Cross-SDK history of localhost HTTP rebinding issues.", "Date range": "2026-06-08", "Protocol version": "Affected SDK versions", "Source IDs": "S062", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-63118: DNS Rebinding Protection Gap" } }, "packageClaimId": "C062" }, { "Claim ID": "C063", "Claim": "stdio is not risk-free; unbounded local message processing can exhaust resources.", "Date range": "2026-06-24", "Protocol version": "Affected SDK versions", "Source IDs": "S063", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-67430: Unbounded stdio Message Handling", "id": "R10-CLAIM063", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 63, "sourceIds": [ "S063" ], "raw": { "Claim ID": "C063", "Claim": "stdio is not risk-free; unbounded local message processing can exhaust resources.", "Date range": "2026-06-24", "Protocol version": "Affected SDK versions", "Source IDs": "S063", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-67430: Unbounded stdio Message Handling" } }, "packageClaimId": "C063" }, { "Claim ID": "C064", "Claim": "Local process launch can disclose inherited environment secrets.", "Date range": "2026-04-01", "Protocol version": "Affected product versions", "Source IDs": "S064", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-40159: Environment Variables Inherited by Local MCP Processes", "id": "R10-CLAIM064", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 64, "sourceIds": [ "S064" ], "raw": { "Claim ID": "C064", "Claim": "Local process launch can disclose inherited environment secrets.", "Date range": "2026-04-01", "Protocol version": "Affected product versions", "Source IDs": "S064", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-40159: Environment Variables Inherited by Local MCP Processes" } }, "packageClaimId": "C064" }, { "Claim ID": "C065", "Claim": "Project-provided MCP configuration can trigger local code execution.", "Date range": "2026-05-09", "Protocol version": "Affected product versions", "Source IDs": "S065", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-47751: Malicious Repository MCP Configuration", "id": "R10-CLAIM065", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 65, "sourceIds": [ "S065" ], "raw": { "Claim ID": "C065", "Claim": "Project-provided MCP configuration can trigger local code execution.", "Date range": "2026-05-09", "Protocol version": "Affected product versions", "Source IDs": "S065", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-47751: Malicious Repository MCP Configuration" } }, "packageClaimId": "C065" }, { "Claim ID": "C066", "Claim": "Workspace MCP configuration is a local supply-chain/code-execution boundary.", "Date range": "2025-09-17", "Protocol version": "Affected product versions", "Source IDs": "S066", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-64109: Malicious Project MCP Configuration", "id": "R10-CLAIM066", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 66, "sourceIds": [ "S066" ], "raw": { "Claim ID": "C066", "Claim": "Workspace MCP configuration is a local supply-chain/code-execution boundary.", "Date range": "2025-09-17", "Protocol version": "Affected product versions", "Source IDs": "S066", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-64109: Malicious Project MCP Configuration" } }, "packageClaimId": "C066" }, { "Claim ID": "C067", "Claim": "A local proxy for remote MCP adds its own package and command-execution risk.", "Date range": "2025-07-09", "Protocol version": "Affected package versions", "Source IDs": "S067", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-6514: Command Injection in Remote-Server Launcher", "id": "R10-CLAIM067", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 67, "sourceIds": [ "S067" ], "raw": { "Claim ID": "C067", "Claim": "A local proxy for remote MCP adds its own package and command-execution risk.", "Date range": "2025-07-09", "Protocol version": "Affected package versions", "Source IDs": "S067", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-6514: Command Injection in Remote-Server Launcher" } }, "packageClaimId": "C067" }, { "Claim ID": "C068", "Claim": "Remote multi-user server implementations must isolate client and transport state.", "Date range": "2026-02-06", "Protocol version": "Affected SDK versions", "Source IDs": "S068", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-25536: Cross-Client Response Data Leakage", "id": "R10-CLAIM068", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 68, "sourceIds": [ "S068" ], "raw": { "Claim ID": "C068", "Claim": "Remote multi-user server implementations must isolate client and transport state.", "Date range": "2026-02-06", "Protocol version": "Affected SDK versions", "Source IDs": "S068", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2026-25536: Cross-Client Response Data Leakage" } }, "packageClaimId": "C068" }, { "Claim ID": "C069", "Claim": "Local development proxies can become exposed network execution surfaces.", "Date range": "2025-06-13", "Protocol version": "Affected package versions", "Source IDs": "S069", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-49596: Unauthenticated Inspector Proxy RCE", "id": "R10-CLAIM069", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 69, "sourceIds": [ "S069" ], "raw": { "Claim ID": "C069", "Claim": "Local development proxies can become exposed network execution surfaces.", "Date range": "2025-06-13", "Protocol version": "Affected package versions", "Source IDs": "S069", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "CVE-2025-49596: Unauthenticated Inspector Proxy RCE" } }, "packageClaimId": "C069" }, { "Claim ID": "C070", "Claim": "Empirical remote-server authentication study and methodological caveats.", "Date range": "2026-05-21", "Protocol version": "2026 measurement study", "Source IDs": "S070", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Authentication Security in Real-World Remote MCP Servers", "id": "R10-CLAIM070", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 70, "sourceIds": [ "S070" ], "raw": { "Claim ID": "C070", "Claim": "Empirical remote-server authentication study and methodological caveats.", "Date range": "2026-05-21", "Protocol version": "2026 measurement study", "Source IDs": "S070", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Authentication Security in Real-World Remote MCP Servers" } }, "packageClaimId": "C070" }, { "Claim ID": "C071", "Claim": "Current search landscape and practical local/remote configuration comparison.", "Date range": "2026-06-01", "Protocol version": "Current explainer", "Source IDs": "S071", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "What Is a Remote MCP Server?", "id": "R10-CLAIM071", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 71, "sourceIds": [ "S071" ], "raw": { "Claim ID": "C071", "Claim": "Current search landscape and practical local/remote configuration comparison.", "Date range": "2026-06-01", "Protocol version": "Current explainer", "Source IDs": "S071", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "What Is a Remote MCP Server?" } }, "packageClaimId": "C071" }, { "Claim ID": "C072", "Claim": "Current distribution guidance for remote services, MCPB and local prototyping.", "Date range": "2026-08-26", "Protocol version": "Current developer docs", "Source IDs": "S072", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build with Agent Skills", "id": "R10-CLAIM072", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 72, "sourceIds": [ "S072" ], "raw": { "Claim ID": "C072", "Claim": "Current distribution guidance for remote services, MCPB and local prototyping.", "Date range": "2026-08-26", "Protocol version": "Current developer docs", "Source IDs": "S072", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Build with Agent Skills" } }, "packageClaimId": "C072" }, { "Claim ID": "C073", "Claim": "Modern server discovery before ordinary requests.", "Date range": "2026-08-26", "Protocol version": "2026-07-28", "Source IDs": "S073", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Server Discovery — MCP 2026-07-28", "id": "R10-CLAIM073", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 73, "sourceIds": [ "S073" ], "raw": { "Claim ID": "C073", "Claim": "Modern server discovery before ordinary requests.", "Date range": "2026-08-26", "Protocol version": "2026-07-28", "Source IDs": "S073", "Confidence": "VERIFIED", "Durability": "DURABLE", "Notes": "Server Discovery — MCP 2026-07-28" } }, "packageClaimId": "C073" }, { "Claim ID": "C074", "Claim": "HTTP+SSE and other features are deprecated rather than erased from history.", "Date range": "2026-08-26", "Protocol version": "2026-07-28", "Source IDs": "S074", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Deprecated Features", "id": "R10-CLAIM074", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 74, "sourceIds": [ "S074" ], "raw": { "Claim ID": "C074", "Claim": "HTTP+SSE and other features are deprecated rather than erased from history.", "Date range": "2026-08-26", "Protocol version": "2026-07-28", "Source IDs": "S074", "Confidence": "STRONGLY_SUPPORTED", "Durability": "DURABLE", "Notes": "Deprecated Features" } }, "packageClaimId": "C074" }, { "Claim ID": "C075", "Claim": "Inspector testing and local proxy pattern for clients without direct remote support.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Test a Remote MCP Server", "id": "R10-CLAIM075", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 75, "sourceIds": [ "S075" ], "raw": { "Claim ID": "C075", "Claim": "Inspector testing and local proxy pattern for clients without direct remote support.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Test a Remote MCP Server" } }, "packageClaimId": "C075" }, { "Claim ID": "C076", "Claim": "OAuth proxy security and remote deployment controls.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S076", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Securing MCP Servers", "id": "R10-CLAIM076", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 76, "sourceIds": [ "S076" ], "raw": { "Claim ID": "C076", "Claim": "OAuth proxy security and remote deployment controls.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S076", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Securing MCP Servers" } }, "packageClaimId": "C076" }, { "Claim ID": "C077", "Claim": "OpenAI agent client patterns for hosted and local MCP servers.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S077", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "OpenAI Agents SDK — MCP", "id": "R10-CLAIM077", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 77, "sourceIds": [ "S077" ], "raw": { "Claim ID": "C077", "Claim": "OpenAI agent client patterns for hosted and local MCP servers.", "Date range": "2026-08-26", "Protocol version": "Current SDK docs", "Source IDs": "S077", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "OpenAI Agents SDK — MCP" } }, "packageClaimId": "C077" }, { "Claim ID": "C078", "Claim": "Managed remote MCP services and centralized Google Cloud access.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S078", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Google Cloud Remote MCP Servers Overview", "id": "R10-CLAIM078", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 78, "sourceIds": [ "S078" ], "raw": { "Claim ID": "C078", "Claim": "Managed remote MCP services and centralized Google Cloud access.", "Date range": "2026-08-26", "Protocol version": "Current cloud docs", "Source IDs": "S078", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Google Cloud Remote MCP Servers Overview" } }, "packageClaimId": "C078" }, { "Claim ID": "C079", "Claim": "Migration from local installation to hosted server and reasons for managed delivery.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S079", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Data Commons MCP Server", "id": "R10-CLAIM079", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 79, "sourceIds": [ "S079" ], "raw": { "Claim ID": "C079", "Claim": "Migration from local installation to hosted server and reasons for managed delivery.", "Date range": "2026-08-26", "Protocol version": "Current product docs", "Source IDs": "S079", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Data Commons MCP Server" } }, "packageClaimId": "C079" }, { "Claim ID": "C080", "Claim": "Remote OAuth/Entra identity and authorization deployment.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S080", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure Remote MCP with Microsoft Entra ID", "id": "R10-CLAIM080", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 80, "sourceIds": [ "S080" ], "raw": { "Claim ID": "C080", "Claim": "Remote OAuth/Entra identity and authorization deployment.", "Date range": "2026-08-26", "Protocol version": "Current Azure docs", "Source IDs": "S080", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure Remote MCP with Microsoft Entra ID" } }, "packageClaimId": "C080" }, { "Claim ID": "C081", "Claim": "For Definition, the common local pattern is: Server process runs on or near the user/host environment. The common remote pattern is: Server runs as a network-accessible service outside the immediate host process.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S001 S002", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Location and transport correlate but are not identical.", "id": "R10-CLAIM081", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 81, "sourceIds": [ "S001", "S002" ], "raw": { "Claim ID": "C081", "Claim": "For Definition, the common local pattern is: Server process runs on or near the user/host environment. The common remote pattern is: Server runs as a network-accessible service outside the immediate host process.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S001 S002", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Location and transport correlate but are not identical." } }, "packageClaimId": "C081" }, { "Claim ID": "C082", "Claim": "For Typical transport, the common local pattern is: stdio; local HTTP or custom stream transport also possible. The common remote pattern is: Streamable HTTP; legacy SSE may remain for compatibility.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004 S017", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Do not define local=stdio and remote=HTTP as absolute rules.", "id": "R10-CLAIM082", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 82, "sourceIds": [ "S003", "S004", "S017" ], "raw": { "Claim ID": "C082", "Claim": "For Typical transport, the common local pattern is: stdio; local HTTP or custom stream transport also possible. The common remote pattern is: Streamable HTTP; legacy SSE may remain for compatibility.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004 S017", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Do not define local=stdio and remote=HTTP as absolute rules." } }, "packageClaimId": "C082" }, { "Claim ID": "C083", "Claim": "For Process startup, the common local pattern is: Host/client commonly launches subprocess. The common remote pattern is: Independently deployed and already running.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A local HTTP service may also be independently started.", "id": "R10-CLAIM083", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 83, "sourceIds": [ "S003", "S004" ], "raw": { "Claim ID": "C083", "Claim": "For Process startup, the common local pattern is: Host/client commonly launches subprocess. The common remote pattern is: Independently deployed and already running.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A local HTTP service may also be independently started." } }, "packageClaimId": "C083" }, { "Claim ID": "C084", "Claim": "For Address/configuration, the common local pattern is: Command, arguments, cwd and environment. The common remote pattern is: HTTPS URL plus authorization configuration.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S024 S027 S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host formats vary.", "id": "R10-CLAIM084", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 84, "sourceIds": [ "S024", "S027", "S028" ], "raw": { "Claim ID": "C084", "Claim": "For Address/configuration, the common local pattern is: Command, arguments, cwd and environment. The common remote pattern is: HTTPS URL plus authorization configuration.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S024 S027 S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host formats vary." } }, "packageClaimId": "C084" }, { "Claim ID": "C085", "Claim": "For Primary user population, the common local pattern is: Usually one user, machine or workspace. The common remote pattern is: One user, tenant, team or many tenants.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S034", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A remote server may still be single-tenant.", "id": "R10-CLAIM085", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 85, "sourceIds": [ "S019", "S034" ], "raw": { "Claim ID": "C085", "Claim": "For Primary user population, the common local pattern is: Usually one user, machine or workspace. The common remote pattern is: One user, tenant, team or many tenants.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S034", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A remote server may still be single-tenant." } }, "packageClaimId": "C085" }, { "Claim ID": "C086", "Claim": "For Local filesystem/OS access, the common local pattern is: Natural and direct under local account/container authority. The common remote pattern is: Requires upload, sync, local bridge or separate local capability.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Remote service cannot magically see a user machine.", "id": "R10-CLAIM086", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 86, "sourceIds": [ "S019", "S023" ], "raw": { "Claim ID": "C086", "Claim": "For Local filesystem/OS access, the common local pattern is: Natural and direct under local account/container authority. The common remote pattern is: Requires upload, sync, local bridge or separate local capability.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Remote service cannot magically see a user machine." } }, "packageClaimId": "C086" }, { "Claim ID": "C087", "Claim": "For Cloud/SaaS access, the common local pattern is: Possible with locally stored credentials. The common remote pattern is: Natural fit for vendor-hosted or centrally managed services.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Credential location and permission inheritance differ.", "id": "R10-CLAIM087", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 87, "sourceIds": [ "S019", "S022" ], "raw": { "Claim ID": "C087", "Claim": "For Cloud/SaaS access, the common local pattern is: Possible with locally stored credentials. The common remote pattern is: Natural fit for vendor-hosted or centrally managed services.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Credential location and permission inheritance differ." } }, "packageClaimId": "C087" }, { "Claim ID": "C088", "Claim": "For Installation, the common local pattern is: Package, binary, container or MCPB per user/device. The common remote pattern is: Usually connect by URL; no server binary on end-user device.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S026 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A tunnel/proxy can reintroduce a local install.", "id": "R10-CLAIM088", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 88, "sourceIds": [ "S020", "S026", "S075" ], "raw": { "Claim ID": "C088", "Claim": "For Installation, the common local pattern is: Package, binary, container or MCPB per user/device. The common remote pattern is: Usually connect by URL; no server binary on end-user device.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S026 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "A tunnel/proxy can reintroduce a local install." } }, "packageClaimId": "C088" }, { "Claim ID": "C089", "Claim": "For Updates, the common local pattern is: Per-installation rollout; may drift. The common remote pattern is: Central operator updates service once.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Central updates also create common-mode risk.", "id": "R10-CLAIM089", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 89, "sourceIds": [ "S019", "S044" ], "raw": { "Claim ID": "C089", "Claim": "For Updates, the common local pattern is: Per-installation rollout; may drift. The common remote pattern is: Central operator updates service once.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Central updates also create common-mode risk." } }, "packageClaimId": "C089" }, { "Claim ID": "C090", "Claim": "For Offline operation, the common local pattern is: Possible when dependencies and data are local. The common remote pattern is: Normally requires network access.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Local server may still depend on cloud APIs.", "id": "R10-CLAIM090", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 90, "sourceIds": [ "S020", "S044" ], "raw": { "Claim ID": "C090", "Claim": "For Offline operation, the common local pattern is: Possible when dependencies and data are local. The common remote pattern is: Normally requires network access.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S044", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Local server may still depend on cloud APIs." } }, "packageClaimId": "C090" }, { "Claim ID": "C091", "Claim": "For Authentication, the common local pattern is: Often process/config trust rather than MCP HTTP auth. The common remote pattern is: Frequently OAuth or bearer-token based; authless is possible.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S005 S035", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "OAuth is optional, not a universal remote requirement.", "id": "R10-CLAIM091", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 91, "sourceIds": [ "S005", "S035" ], "raw": { "Claim ID": "C091", "Claim": "For Authentication, the common local pattern is: Often process/config trust rather than MCP HTTP auth. The common remote pattern is: Frequently OAuth or bearer-token based; authless is possible.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S005 S035", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "OAuth is optional, not a universal remote requirement." } }, "packageClaimId": "C091" }, { "Claim ID": "C092", "Claim": "For Authorization, the common local pattern is: Local user/OS permissions plus server and upstream policy. The common remote pattern is: Token/scopes plus server, tenant and upstream policy.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S005 S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host confirmation does not replace server authorization.", "id": "R10-CLAIM092", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 92, "sourceIds": [ "S005", "S016" ], "raw": { "Claim ID": "C092", "Claim": "For Authorization, the common local pattern is: Local user/OS permissions plus server and upstream policy. The common remote pattern is: Token/scopes plus server, tenant and upstream policy.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S005 S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host confirmation does not replace server authorization." } }, "packageClaimId": "C092" }, { "Claim ID": "C093", "Claim": "For Secrets, the common local pattern is: Environment, config, OS keychain or local token store. The common remote pattern is: Secret manager, workload identity, delegated tokens or service credentials.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S064", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Both can leak through poor implementation.", "id": "R10-CLAIM093", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 93, "sourceIds": [ "S020", "S064" ], "raw": { "Claim ID": "C093", "Claim": "For Secrets, the common local pattern is: Environment, config, OS keychain or local token store. The common remote pattern is: Secret manager, workload identity, delegated tokens or service credentials.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S020 S064", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Both can leak through poor implementation." } }, "packageClaimId": "C093" }, { "Claim ID": "C094", "Claim": "For Multi-tenancy, the common local pattern is: Usually absent or limited. The common remote pattern is: Common and security-critical.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S068 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Transport/session objects must not be reused across users.", "id": "R10-CLAIM094", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 94, "sourceIds": [ "S068", "S042" ], "raw": { "Claim ID": "C094", "Claim": "For Multi-tenancy, the common local pattern is: Usually absent or limited. The common remote pattern is: Common and security-critical.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S068 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Transport/session objects must not be reused across users." } }, "packageClaimId": "C094" }, { "Claim ID": "C095", "Claim": "For Scaling, the common local pattern is: Scale by installing processes on more machines or local pooling. The common remote pattern is: Horizontal/vertical scaling behind standard infrastructure.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S004 S007 S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "2026 core removes protocol-session affinity for modern requests.", "id": "R10-CLAIM095", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 95, "sourceIds": [ "S004", "S007", "S008" ], "raw": { "Claim ID": "C095", "Claim": "For Scaling, the common local pattern is: Scale by installing processes on more machines or local pooling. The common remote pattern is: Horizontal/vertical scaling behind standard infrastructure.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S004 S007 S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "2026 core removes protocol-session affinity for modern requests." } }, "packageClaimId": "C095" }, { "Claim ID": "C096", "Claim": "For Latency, the common local pattern is: Avoids wide-area network but may incur startup/IPC and local workload cost. The common remote pattern is: Adds network/TLS/auth but may be warm, regional and closer to data.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "No universal winner; measure complete workflow.", "id": "R10-CLAIM096", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 96, "sourceIds": [ "S003", "S004" ], "raw": { "Claim ID": "C096", "Claim": "For Latency, the common local pattern is: Avoids wide-area network but may incur startup/IPC and local workload cost. The common remote pattern is: Adds network/TLS/auth but may be warm, regional and closer to data.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "No universal winner; measure complete workflow." } }, "packageClaimId": "C096" }, { "Claim ID": "C097", "Claim": "For Availability, the common local pattern is: Depends on host machine and process lifecycle. The common remote pattern is: Depends on service, network, region and operator SLO.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S035 S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Central failure affects many users; local failure is isolated.", "id": "R10-CLAIM097", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 97, "sourceIds": [ "S035", "S039" ], "raw": { "Claim ID": "C097", "Claim": "For Availability, the common local pattern is: Depends on host machine and process lifecycle. The common remote pattern is: Depends on service, network, region and operator SLO.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S035 S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Central failure affects many users; local failure is isolated." } }, "packageClaimId": "C097" }, { "Claim ID": "C098", "Claim": "For Audit/observability, the common local pattern is: Logs are distributed across devices unless collected. The common remote pattern is: Central logs, traces and policy easier to implement.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S037 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Centralization does not guarantee correct audit.", "id": "R10-CLAIM098", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 98, "sourceIds": [ "S037", "S042" ], "raw": { "Claim ID": "C098", "Claim": "For Audit/observability, the common local pattern is: Logs are distributed across devices unless collected. The common remote pattern is: Central logs, traces and policy easier to implement.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S037 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Centralization does not guarantee correct audit." } }, "packageClaimId": "C098" }, { "Claim ID": "C099", "Claim": "For Package supply chain, the common local pattern is: Direct end-user execution risk. The common remote pattern is: Primarily operator build/deploy risk.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S065 S066 S067", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Local proxy for remote server can add both risks.", "id": "R10-CLAIM099", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 99, "sourceIds": [ "S065", "S066", "S067" ], "raw": { "Claim ID": "C099", "Claim": "For Package supply chain, the common local pattern is: Direct end-user execution risk. The common remote pattern is: Primarily operator build/deploy risk.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S065 S066 S067", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Local proxy for remote server can add both risks." } }, "packageClaimId": "C099" }, { "Claim ID": "C100", "Claim": "For Network exposure, the common local pattern is: Minimal over stdio; local HTTP remains network-reachable and needs protection. The common remote pattern is: First-class network and Internet/private-network boundary.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S004 S058 S059", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Origin validation and localhost binding matter for local HTTP.", "id": "R10-CLAIM100", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 100, "sourceIds": [ "S004", "S058", "S059" ], "raw": { "Claim ID": "C100", "Claim": "For Network exposure, the common local pattern is: Minimal over stdio; local HTTP remains network-reachable and needs protection. The common remote pattern is: First-class network and Internet/private-network boundary.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S004 S058 S059", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Origin validation and localhost binding matter for local HTTP." } }, "packageClaimId": "C100" }, { "Claim ID": "C101", "Claim": "For Data residency, the common local pattern is: Can keep processing and data on device, but model/host may still transmit context. The common remote pattern is: Data travels to service and often underlying cloud systems.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Server location alone does not prove end-to-end locality.", "id": "R10-CLAIM101", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 101, "sourceIds": [ "S019", "S023" ], "raw": { "Claim ID": "C101", "Claim": "For Data residency, the common local pattern is: Can keep processing and data on device, but model/host may still transmit context. The common remote pattern is: Data travels to service and often underlying cloud systems.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S023", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Server location alone does not prove end-to-end locality." } }, "packageClaimId": "C101" }, { "Claim ID": "C102", "Claim": "For Cross-device availability, the common local pattern is: Normally tied to installed machine. The common remote pattern is: Accessible from multiple supported surfaces after connection.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host/product restrictions still apply.", "id": "R10-CLAIM102", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 102, "sourceIds": [ "S019", "S026" ], "raw": { "Claim ID": "C102", "Claim": "For Cross-device availability, the common local pattern is: Normally tied to installed machine. The common remote pattern is: Accessible from multiple supported surfaces after connection.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Host/product restrictions still apply." } }, "packageClaimId": "C102" }, { "Claim ID": "C103", "Claim": "For Enterprise policy, the common local pattern is: Allowlist, signed bundles, sandbox and endpoint controls. The common remote pattern is: SSO/OAuth, gateway, DLP, centralized tool policy and audit.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S023 S027 S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Hybrid enterprises usually need both policy families.", "id": "R10-CLAIM103", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 103, "sourceIds": [ "S023", "S027", "S037" ], "raw": { "Claim ID": "C103", "Claim": "For Enterprise policy, the common local pattern is: Allowlist, signed bundles, sandbox and endpoint controls. The common remote pattern is: SSO/OAuth, gateway, DLP, centralized tool policy and audit.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S023 S027 S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Hybrid enterprises usually need both policy families." } }, "packageClaimId": "C103" }, { "Claim ID": "C104", "Claim": "For Best-fit capabilities, the common local pattern is: Files, IDEs, desktop apps, hardware, localhost DBs, private scripts. The common remote pattern is: SaaS, shared APIs, enterprise search, collaboration, managed data.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "One host can use both simultaneously.", "id": "R10-CLAIM104", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 104, "sourceIds": [ "S019", "S022" ], "raw": { "Claim ID": "C104", "Claim": "For Best-fit capabilities, the common local pattern is: Files, IDEs, desktop apps, hardware, localhost DBs, private scripts. The common remote pattern is: SaaS, shared APIs, enterprise search, collaboration, managed data.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S019 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "One host can use both simultaneously." } }, "packageClaimId": "C104" }, { "Claim ID": "C105", "Claim": "For State model, the common local pattern is: Application state can live locally or in explicit handles. The common remote pattern is: Application state can live in shared storage or explicit handles.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S006 S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Stateless protocol does not mean stateless application.", "id": "R10-CLAIM105", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 105, "sourceIds": [ "S006", "S008" ], "raw": { "Claim ID": "C105", "Claim": "For State model, the common local pattern is: Application state can live locally or in explicit handles. The common remote pattern is: Application state can live in shared storage or explicit handles.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S006 S008", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Stateless protocol does not mean stateless application." } }, "packageClaimId": "C105" }, { "Claim ID": "C106", "Claim": "For Modern cancellation, the common local pattern is: Client sends notifications/cancelled over shared stdio channel. The common remote pattern is: Closing request SSE response stream cancels that request.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Current transport-specific behavior.", "id": "R10-CLAIM106", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 106, "sourceIds": [ "S003", "S004" ], "raw": { "Claim ID": "C106", "Claim": "For Modern cancellation, the common local pattern is: Client sends notifications/cancelled over shared stdio channel. The common remote pattern is: Closing request SSE response stream cancels that request.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Current transport-specific behavior." } }, "packageClaimId": "C106" }, { "Claim ID": "C107", "Claim": "For Change notifications, the common local pattern is: subscriptions/listen shares stdio channel. The common remote pattern is: subscriptions/listen holds an SSE response stream.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "No general old GET stream in 2026.", "id": "R10-CLAIM107", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 107, "sourceIds": [ "S003", "S004" ], "raw": { "Claim ID": "C107", "Claim": "For Change notifications, the common local pattern is: subscriptions/listen shares stdio channel. The common remote pattern is: subscriptions/listen holds an SSE response stream.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S003 S004", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "No general old GET stream in 2026." } }, "packageClaimId": "C107" }, { "Claim ID": "C108", "Claim": "For Distribution, the common local pattern is: Package registries, bundles, containers, binaries and marketplaces. The common remote pattern is: URL, registry metadata, directory and account authorization.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S049 S050 S051", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Protocol interoperability is separate from software distribution.", "id": "R10-CLAIM108", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 108, "sourceIds": [ "S049", "S050", "S051" ], "raw": { "Claim ID": "C108", "Claim": "For Distribution, the common local pattern is: Package registries, bundles, containers, binaries and marketplaces. The common remote pattern is: URL, registry metadata, directory and account authorization.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S049 S050 S051", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Protocol interoperability is separate from software distribution." } }, "packageClaimId": "C108" }, { "Claim ID": "C109", "Claim": "For Operational ownership, the common local pattern is: End user, IT endpoint team, or software vendor. The common remote pattern is: SaaS vendor, enterprise platform team, customer or cloud provider.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S034 S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "“Remote” does not identify the operator.", "id": "R10-CLAIM109", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 109, "sourceIds": [ "S034", "S039" ], "raw": { "Claim ID": "C109", "Claim": "For Operational ownership, the common local pattern is: End user, IT endpoint team, or software vendor. The common remote pattern is: SaaS vendor, enterprise platform team, customer or cloud provider.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S034 S039", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "“Remote” does not identify the operator." } }, "packageClaimId": "C109" }, { "Claim ID": "C110", "Claim": "For Primary failure domain, the common local pattern is: One device/workspace or distributed fleet rollout. The common remote pattern is: Shared service, region, identity provider or network path.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S039 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Centralization trades fragmented failures for common-mode failures.", "id": "R10-CLAIM110", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 110, "sourceIds": [ "S039", "S042" ], "raw": { "Claim ID": "C110", "Claim": "For Primary failure domain, the common local pattern is: One device/workspace or distributed fleet rollout. The common remote pattern is: Shared service, region, identity provider or network path.", "Date range": "2024-2026", "Protocol version": "Cross-version/current", "Source IDs": "S039 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Centralization trades fragmented failures for common-mode failures." } }, "packageClaimId": "C110" }, { "Claim ID": "C111", "Claim": "Malicious or compromised package affects local and remote MCP differently: local — Direct execution under user or container identity; remote — Operator build/deploy pipeline; not normally installed by end user.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S048 S051 S065 S066", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Publisher verification, pinning, signatures/provenance, review, sandbox, controlled updates", "id": "R10-CLAIM111", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 111, "sourceIds": [ "S048", "S051", "S065", "S066" ], "raw": { "Claim ID": "C111", "Claim": "Malicious or compromised package affects local and remote MCP differently: local — Direct execution under user or container identity; remote — Operator build/deploy pipeline; not normally installed by end user.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S048 S051 S065 S066", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Publisher verification, pinning, signatures/provenance, review, sandbox, controlled updates" } }, "packageClaimId": "C111" }, { "Claim ID": "C112", "Claim": "Project/workspace configuration code execution affects local and remote MCP differently: local — High where repository config can launch commands; remote — Usually URL/config risk rather than local command launch.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S027 S065 S066", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Trust prompt, repository allowlist, review diffs, sandbox, no auto-start from untrusted repos", "id": "R10-CLAIM112", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 112, "sourceIds": [ "S027", "S065", "S066" ], "raw": { "Claim ID": "C112", "Claim": "Project/workspace configuration code execution affects local and remote MCP differently: local — High where repository config can launch commands; remote — Usually URL/config risk rather than local command launch.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S027 S065 S066", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Trust prompt, repository allowlist, review diffs, sandbox, no auto-start from untrusted repos" } }, "packageClaimId": "C112" }, { "Claim ID": "C113", "Claim": "Environment-variable leakage affects local and remote MCP differently: local — Child process may inherit broad host environment; remote — Operator services may expose service secrets to code or logs.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S064 S020", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Minimal explicit env, secret broker, keychain, no broad inheritance, redaction", "id": "R10-CLAIM113", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 113, "sourceIds": [ "S064", "S020" ], "raw": { "Claim ID": "C113", "Claim": "Environment-variable leakage affects local and remote MCP differently: local — Child process may inherit broad host environment; remote — Operator services may expose service secrets to code or logs.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S064 S020", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Minimal explicit env, secret broker, keychain, no broad inheritance, redaction" } }, "packageClaimId": "C113" }, { "Claim ID": "C114", "Claim": "Filesystem/OS overreach affects local and remote MCP differently: local — Server may have user-level file/process authority; remote — Limited unless local bridge/uploads exist; server may overreach in cloud account.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S023 S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Sandbox, roots/path allowlists, least-privilege account, dry-run and confirmations", "id": "R10-CLAIM114", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 114, "sourceIds": [ "S023", "S027" ], "raw": { "Claim ID": "C114", "Claim": "Filesystem/OS overreach affects local and remote MCP differently: local — Server may have user-level file/process authority; remote — Limited unless local bridge/uploads exist; server may overreach in cloud account.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S023 S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Sandbox, roots/path allowlists, least-privilege account, dry-run and confirmations" } }, "packageClaimId": "C114" }, { "Claim ID": "C115", "Claim": "DNS rebinding against local HTTP affects local and remote MCP differently: local — Remote website can target localhost service if host/origin validation is weak; remote — Ordinary host validation/TLS concerns, not uniquely localhost.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S004 S058 S059 S060 S061 S062", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Origin validation, localhost binding, host allowlist, auth, patched SDK", "id": "R10-CLAIM115", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 115, "sourceIds": [ "S004", "S058", "S059", "S060", "S061", "S062" ], "raw": { "Claim ID": "C115", "Claim": "DNS rebinding against local HTTP affects local and remote MCP differently: local — Remote website can target localhost service if host/origin validation is weak; remote — Ordinary host validation/TLS concerns, not uniquely localhost.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S004 S058 S059 S060 S061 S062", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Origin validation, localhost binding, host allowlist, auth, patched SDK" } }, "packageClaimId": "C115" }, { "Claim ID": "C116", "Claim": "Unbounded message/resource consumption affects local and remote MCP differently: local — Can exhaust desktop/agent process; remote — Can exhaust shared service or tenant quota.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S063 S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Message limits, timeouts, quotas, backpressure, cancellation", "id": "R10-CLAIM116", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 116, "sourceIds": [ "S063", "S016" ], "raw": { "Claim ID": "C116", "Claim": "Unbounded message/resource consumption affects local and remote MCP differently: local — Can exhaust desktop/agent process; remote — Can exhaust shared service or tenant quota.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S063 S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Message limits, timeouts, quotas, backpressure, cancellation" } }, "packageClaimId": "C116" }, { "Claim ID": "C117", "Claim": "Token theft or leakage affects local and remote MCP differently: local — Local API tokens in env/config/keychain; remote — Bearer access/refresh tokens, logs and multi-tenant storage.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S005 S052 S057", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Secure storage, minimal scopes, TLS, audience binding, rotation, redaction", "id": "R10-CLAIM117", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 117, "sourceIds": [ "S005", "S052", "S057" ], "raw": { "Claim ID": "C117", "Claim": "Token theft or leakage affects local and remote MCP differently: local — Local API tokens in env/config/keychain; remote — Bearer access/refresh tokens, logs and multi-tenant storage.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S005 S052 S057", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Secure storage, minimal scopes, TLS, audience binding, rotation, redaction" } }, "packageClaimId": "C117" }, { "Claim ID": "C118", "Claim": "OAuth confused deputy/account mix-up affects local and remote MCP differently: local — Relevant when local client connects to remote OAuth server; remote — Central remote authorization boundary.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S052 S053 S054 S055 S056", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "PKCE, issuer validation, state binding, resource indicators, exact redirects", "id": "R10-CLAIM118", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 118, "sourceIds": [ "S052", "S053", "S054", "S055", "S056" ], "raw": { "Claim ID": "C118", "Claim": "OAuth confused deputy/account mix-up affects local and remote MCP differently: local — Relevant when local client connects to remote OAuth server; remote — Central remote authorization boundary.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S052 S053 S054 S055 S056", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "PKCE, issuer validation, state binding, resource indicators, exact redirects" } }, "packageClaimId": "C118" }, { "Claim ID": "C119", "Claim": "Cross-user or cross-tenant data leakage affects local and remote MCP differently: local — Lower in single-user process but possible with shared local daemon; remote — Critical in multi-user services and reused transports.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S068 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Per-request identity, tenant partitioning, no shared mutable session/transport state, tests", "id": "R10-CLAIM119", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 119, "sourceIds": [ "S068", "S042" ], "raw": { "Claim ID": "C119", "Claim": "Cross-user or cross-tenant data leakage affects local and remote MCP differently: local — Lower in single-user process but possible with shared local daemon; remote — Critical in multi-user services and reused transports.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S068 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Per-request identity, tenant partitioning, no shared mutable session/transport state, tests" } }, "packageClaimId": "C119" }, { "Claim ID": "C120", "Claim": "Network interception/endpoint impersonation affects local and remote MCP differently: local — Low over stdio; local proxy can still be attacked; remote — TLS, DNS and endpoint identity central.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S004 S005", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "HTTPS, certificate validation, approved endpoint catalog, no token forwarding", "id": "R10-CLAIM120", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 120, "sourceIds": [ "S004", "S005" ], "raw": { "Claim ID": "C120", "Claim": "Network interception/endpoint impersonation affects local and remote MCP differently: local — Low over stdio; local proxy can still be attacked; remote — TLS, DNS and endpoint identity central.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S004 S005", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "HTTPS, certificate validation, approved endpoint catalog, no token forwarding" } }, "packageClaimId": "C120" }, { "Claim ID": "C121", "Claim": "Availability/common-mode outage affects local and remote MCP differently: local — Usually affects one user/device; remote — Can affect all consumers simultaneously.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S039 S041", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Health checks, redundancy, regional design, graceful degradation, local fallback where justified", "id": "R10-CLAIM121", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 121, "sourceIds": [ "S039", "S041" ], "raw": { "Claim ID": "C121", "Claim": "Availability/common-mode outage affects local and remote MCP differently: local — Usually affects one user/device; remote — Can affect all consumers simultaneously.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S039 S041", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Health checks, redundancy, regional design, graceful degradation, local fallback where justified" } }, "packageClaimId": "C121" }, { "Claim ID": "C122", "Claim": "Prompt injection in tool/resource content affects local and remote MCP differently: local — Yes; remote — Yes.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Treat content as untrusted, tool isolation, provenance, confirmations, least privilege", "id": "R10-CLAIM122", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 122, "sourceIds": [ "S016" ], "raw": { "Claim ID": "C122", "Claim": "Prompt injection in tool/resource content affects local and remote MCP differently: local — Yes; remote — Yes.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S016", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Treat content as untrusted, tool isolation, provenance, confirmations, least privilege" } }, "packageClaimId": "C122" }, { "Claim ID": "C123", "Claim": "Excessive upstream permissions affects local and remote MCP differently: local — Personal token may be overbroad; remote — Shared service/delegated token may be overbroad.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S005 S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Narrow scopes, object-level authorization, separate read/write tools, audits", "id": "R10-CLAIM123", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 123, "sourceIds": [ "S005", "S037" ], "raw": { "Claim ID": "C123", "Claim": "Excessive upstream permissions affects local and remote MCP differently: local — Personal token may be overbroad; remote — Shared service/delegated token may be overbroad.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S005 S037", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Narrow scopes, object-level authorization, separate read/write tools, audits" } }, "packageClaimId": "C123" }, { "Claim ID": "C124", "Claim": "Proxy/tunnel compromise affects local and remote MCP differently: local — Local tunnel package can execute code and hold tokens; remote — Tunnel endpoint becomes part of service boundary.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S026 S067 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Prefer native transport when supported, patched proxy, scope tokens, monitor tunnel", "id": "R10-CLAIM124", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 124, "sourceIds": [ "S026", "S067", "S075" ], "raw": { "Claim ID": "C124", "Claim": "Proxy/tunnel compromise affects local and remote MCP differently: local — Local tunnel package can execute code and hold tokens; remote — Tunnel endpoint becomes part of service boundary.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S026 S067 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Prefer native transport when supported, patched proxy, scope tokens, monitor tunnel" } }, "packageClaimId": "C124" }, { "Claim ID": "C125", "Claim": "Central operator compromise affects local and remote MCP differently: local — Distributed installs reduce single service compromise but updates can still propagate; remote — One operator breach can affect all tenants.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S037 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Separation of duties, deployment signing, workload identity, audit, incident response", "id": "R10-CLAIM125", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 125, "sourceIds": [ "S037", "S042" ], "raw": { "Claim ID": "C125", "Claim": "Central operator compromise affects local and remote MCP differently: local — Distributed installs reduce single service compromise but updates can still propagate; remote — One operator breach can affect all tenants.", "Date range": "2025-2026", "Protocol version": "Current security analysis", "Source IDs": "S037 S042", "Confidence": "STRONGLY_SUPPORTED", "Durability": "PERIODICALLY REVIEW", "Notes": "Separation of duties, deployment signing, workload identity, audit, incident response" } }, "packageClaimId": "C125" }, { "Claim ID": "C126", "Claim": "Claude Desktop current support snapshot: local stdio — Yes via desktop extensions/config; remote HTTP — Yes via remote connectors; OAuth — Remote connectors.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S019 S021 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Desktop extension or enterprise proxy patterns", "id": "R10-CLAIM126", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 126, "sourceIds": [ "S019", "S021", "S022" ], "raw": { "Claim ID": "C126", "Claim": "Claude Desktop current support snapshot: local stdio — Yes via desktop extensions/config; remote HTTP — Yes via remote connectors; OAuth — Remote connectors.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S019 S021 S022", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Desktop extension or enterprise proxy patterns" } }, "packageClaimId": "C126" }, { "Claim ID": "C127", "Claim": "Claude Code current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S024", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Runs in developer environment; direct local and remote configs", "id": "R10-CLAIM127", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 127, "sourceIds": [ "S024" ], "raw": { "Claim ID": "C127", "Claim": "Claude Code current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S024", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Runs in developer environment; direct local and remote configs" } }, "packageClaimId": "C127" }, { "Claim ID": "C128", "Claim": "Anthropic Messages API current support snapshot: local stdio — No direct support; remote HTTP — Yes, public endpoint required; OAuth — Bearer token support.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S025", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Requires externally reachable endpoint or separate architecture", "id": "R10-CLAIM128", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 128, "sourceIds": [ "S025" ], "raw": { "Claim ID": "C128", "Claim": "Anthropic Messages API current support snapshot: local stdio — No direct support; remote HTTP — Yes, public endpoint required; OAuth — Bearer token support.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S025", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Requires externally reachable endpoint or separate architecture" } }, "packageClaimId": "C128" }, { "Claim ID": "C129", "Claim": "ChatGPT current support snapshot: local stdio — No direct support; remote HTTP — Yes; OAuth — Yes/host-specific auth options.", "Date range": "2026-08-25", "Protocol version": "Product implementation", "Source IDs": "S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure MCP Tunnel", "id": "R10-CLAIM129", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 129, "sourceIds": [ "S026" ], "raw": { "Claim ID": "C129", "Claim": "ChatGPT current support snapshot: local stdio — No direct support; remote HTTP — Yes; OAuth — Yes/host-specific auth options.", "Date range": "2026-08-25", "Protocol version": "Product implementation", "Source IDs": "S026", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Secure MCP Tunnel" } }, "packageClaimId": "C129" }, { "Claim ID": "C130", "Claim": "VS Code / GitHub Copilot current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Supported by client/server flow.", "Date range": "2026-08-20", "Protocol version": "Product implementation", "Source IDs": "S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Can run server locally, remotely, in remote workspace or dev container", "id": "R10-CLAIM130", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 130, "sourceIds": [ "S027" ], "raw": { "Claim ID": "C130", "Claim": "VS Code / GitHub Copilot current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Supported by client/server flow.", "Date range": "2026-08-20", "Protocol version": "Product implementation", "Source IDs": "S027", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Can run server locally, remotely, in remote workspace or dev container" } }, "packageClaimId": "C130" }, { "Claim ID": "C131", "Claim": "Cursor IDE current support snapshot: local stdio — Yes; remote HTTP — Yes; legacy SSE also documented; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local process or reachable URL", "id": "R10-CLAIM131", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 131, "sourceIds": [ "S028" ], "raw": { "Claim ID": "C131", "Claim": "Cursor IDE current support snapshot: local stdio — Yes; remote HTTP — Yes; legacy SSE also documented; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S028", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local process or reachable URL" } }, "packageClaimId": "C131" }, { "Claim ID": "C132", "Claim": "Cursor Cloud Agents current support snapshot: local stdio — Runs inside cloud-agent VM, not user desktop; remote HTTP — Yes and recommended; OAuth — Per-user.", "Date range": "2026-08-24", "Protocol version": "Product implementation", "Source IDs": "S029", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Requires network reachability or approved remote service", "id": "R10-CLAIM132", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 132, "sourceIds": [ "S029" ], "raw": { "Claim ID": "C132", "Claim": "Cursor Cloud Agents current support snapshot: local stdio — Runs inside cloud-agent VM, not user desktop; remote HTTP — Yes and recommended; OAuth — Per-user.", "Date range": "2026-08-24", "Protocol version": "Product implementation", "Source IDs": "S029", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Requires network reachability or approved remote service" } }, "packageClaimId": "C132" }, { "Claim ID": "C133", "Claim": "JetBrains AI Assistant current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Product/server dependent.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S030", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local Docker or local process documented", "id": "R10-CLAIM133", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 133, "sourceIds": [ "S030" ], "raw": { "Claim ID": "C133", "Claim": "JetBrains AI Assistant current support snapshot: local stdio — Yes; remote HTTP — Yes; OAuth — Product/server dependent.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S030", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local Docker or local process documented" } }, "packageClaimId": "C133" }, { "Claim ID": "C134", "Claim": "Gemini CLI current support snapshot: local stdio — Yes; remote HTTP — Yes; SSE also documented; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S031", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Runs in CLI environment and can reach local/private endpoints", "id": "R10-CLAIM134", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 134, "sourceIds": [ "S031" ], "raw": { "Claim ID": "C134", "Claim": "Gemini CLI current support snapshot: local stdio — Yes; remote HTTP — Yes; SSE also documented; OAuth — Yes.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S031", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Runs in CLI environment and can reach local/private endpoints" } }, "packageClaimId": "C134" }, { "Claim ID": "C135", "Claim": "Goose Desktop/CLI current support snapshot: local stdio — Documented extension pattern; remote HTTP — Documented extension pattern; OAuth — Server/client dependent.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S032", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local agent can use local extensions", "id": "R10-CLAIM135", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 135, "sourceIds": [ "S032" ], "raw": { "Claim ID": "C135", "Claim": "Goose Desktop/CLI current support snapshot: local stdio — Documented extension pattern; remote HTTP — Documented extension pattern; OAuth — Server/client dependent.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S032", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local agent can use local extensions" } }, "packageClaimId": "C135" }, { "Claim ID": "C136", "Claim": "Zed current support snapshot: local stdio — Documented; remote HTTP — Live-check required; OAuth — Live-check required.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S033", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local context server pattern", "id": "R10-CLAIM136", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 136, "sourceIds": [ "S033" ], "raw": { "Claim ID": "C136", "Claim": "Zed current support snapshot: local stdio — Documented; remote HTTP — Live-check required; OAuth — Live-check required.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S033", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Local context server pattern" } }, "packageClaimId": "C136" }, { "Claim ID": "C137", "Claim": "MCP Inspector current support snapshot: local stdio — Yes through proxy/launcher; remote HTTP — Yes; OAuth — Quick OAuth flow.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S069 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Can test localhost; do not expose inspector proxy carelessly", "id": "R10-CLAIM137", "sourceIds": [], "evidenceStatus": "archive claim citation withheld; requires explicit claim-by-claim publication remap", "archive": { "namespace": "research/10/claim_register.json", "row": 137, "sourceIds": [ "S069", "S075" ], "raw": { "Claim ID": "C137", "Claim": "MCP Inspector current support snapshot: local stdio — Yes through proxy/launcher; remote HTTP — Yes; OAuth — Quick OAuth flow.", "Date range": "2026-08-26", "Protocol version": "Product implementation", "Source IDs": "S069 S075", "Confidence": "STRONGLY_SUPPORTED", "Durability": "LIVE-CHECK REQUIRED", "Notes": "Can test localhost; do not expose inspector proxy carelessly" } }, "packageClaimId": "C137" } ] }