{ "title": "MCP Deployment Taxonomy", "schemaVersion": "1.0", "researchFreeze": "2026-08-26", "protocolRevision": "MCP 2026-07-28", "sourcePackage": "research/10", "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.", "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.", "checkedAt": "2026-08-26", "count": 12, "records": [ { "Pattern": "Local spawned subprocess", "Location": "User/host machine", "Transport": "stdio", "Typical operator": "End user or software vendor", "State": "Process memory/local storage/explicit handles", "Best fit": "Filesystem, IDE, desktop app, localhost DB", "Primary risk": "Untrusted local code and inherited authority", "Sources": "S003 S019", "id": "R10-TAX001", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 1, "sourceIds": [ "S003", "S019" ], "raw": { "Pattern": "Local spawned subprocess", "Location": "User/host machine", "Transport": "stdio", "Typical operator": "End user or software vendor", "State": "Process memory/local storage/explicit handles", "Best fit": "Filesystem, IDE, desktop app, localhost DB", "Primary risk": "Untrusted local code and inherited authority", "Sources": "S003 S019" } } }, { "Pattern": "Local packaged MCPB", "Location": "User desktop", "Transport": "stdio", "Typical operator": "Vendor packages; user installs", "State": "Local app/bundle state", "Best fit": "One-click desktop extensions and offline access", "Primary risk": "Bundle supply chain, permissions and platform drift", "Sources": "S020 S021 S049", "id": "R10-TAX002", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 2, "sourceIds": [ "S020", "S021", "S049" ], "raw": { "Pattern": "Local packaged MCPB", "Location": "User desktop", "Transport": "stdio", "Typical operator": "Vendor packages; user installs", "State": "Local app/bundle state", "Best fit": "One-click desktop extensions and offline access", "Primary risk": "Bundle supply chain, permissions and platform drift", "Sources": "S020 S021 S049" } } }, { "Pattern": "Local container", "Location": "User/enterprise machine", "Transport": "stdio or localhost HTTP", "Typical operator": "User or endpoint team", "State": "Container volume/local DB", "Best fit": "Dependency isolation and reproducible developer tools", "Primary risk": "Overbroad mounts, network and container privileges", "Sources": "S027 S030", "id": "R10-TAX003", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 3, "sourceIds": [ "S027", "S030" ], "raw": { "Pattern": "Local container", "Location": "User/enterprise machine", "Transport": "stdio or localhost HTTP", "Typical operator": "User or endpoint team", "State": "Container volume/local DB", "Best fit": "Dependency isolation and reproducible developer tools", "Primary risk": "Overbroad mounts, network and container privileges", "Sources": "S027 S030" } } }, { "Pattern": "Local HTTP daemon", "Location": "User/enterprise machine", "Transport": "Streamable HTTP", "Typical operator": "Desktop app or local service", "State": "Local daemon/application store", "Best fit": "Multiple local clients, browser-oriented integration", "Primary risk": "DNS rebinding and unintended network exposure", "Sources": "S004 S058 S059", "id": "R10-TAX004", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 4, "sourceIds": [ "S004", "S058", "S059" ], "raw": { "Pattern": "Local HTTP daemon", "Location": "User/enterprise machine", "Transport": "Streamable HTTP", "Typical operator": "Desktop app or local service", "State": "Local daemon/application store", "Best fit": "Multiple local clients, browser-oriented integration", "Primary risk": "DNS rebinding and unintended network exposure", "Sources": "S004 S058 S059" } } }, { "Pattern": "Remote single-user service", "Location": "Cloud/on-prem service", "Transport": "Streamable HTTP", "Typical operator": "User or team", "State": "Dedicated storage", "Best fit": "Cross-device personal service or private automation", "Primary risk": "Token security and service availability", "Sources": "S004 S035", "id": "R10-TAX005", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 5, "sourceIds": [ "S004", "S035" ], "raw": { "Pattern": "Remote single-user service", "Location": "Cloud/on-prem service", "Transport": "Streamable HTTP", "Typical operator": "User or team", "State": "Dedicated storage", "Best fit": "Cross-device personal service or private automation", "Primary risk": "Token security and service availability", "Sources": "S004 S035" } } }, { "Pattern": "Remote single-tenant enterprise", "Location": "Private cloud/VPC/on-prem", "Transport": "Streamable HTTP", "Typical operator": "Enterprise platform team", "State": "Tenant-specific stores and identity", "Best fit": "Internal systems and centralized governance", "Primary risk": "Identity propagation, network policy and operator compromise", "Sources": "S042 S047", "id": "R10-TAX006", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 6, "sourceIds": [ "S042", "S047" ], "raw": { "Pattern": "Remote single-tenant enterprise", "Location": "Private cloud/VPC/on-prem", "Transport": "Streamable HTTP", "Typical operator": "Enterprise platform team", "State": "Tenant-specific stores and identity", "Best fit": "Internal systems and centralized governance", "Primary risk": "Identity propagation, network policy and operator compromise", "Sources": "S042 S047" } } }, { "Pattern": "Remote multi-tenant SaaS", "Location": "Vendor cloud", "Transport": "Streamable HTTP", "Typical operator": "SaaS vendor", "State": "Tenant-partitioned shared services", "Best fit": "Official vendor integrations for many customers", "Primary risk": "Cross-tenant leakage, OAuth and common-mode outage", "Sources": "S034 S036 S068", "id": "R10-TAX007", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 7, "sourceIds": [ "S034", "S036", "S068" ], "raw": { "Pattern": "Remote multi-tenant SaaS", "Location": "Vendor cloud", "Transport": "Streamable HTTP", "Typical operator": "SaaS vendor", "State": "Tenant-partitioned shared services", "Best fit": "Official vendor integrations for many customers", "Primary risk": "Cross-tenant leakage, OAuth and common-mode outage", "Sources": "S034 S036 S068" } } }, { "Pattern": "Managed cloud MCP service", "Location": "Cloud provider platform", "Transport": "Streamable HTTP", "Typical operator": "Cloud provider", "State": "Managed service stores", "Best fit": "Cloud resource management and provider data products", "Primary risk": "Provider IAM complexity and broad cloud authority", "Sources": "S036 S078", "id": "R10-TAX008", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 8, "sourceIds": [ "S036", "S078" ], "raw": { "Pattern": "Managed cloud MCP service", "Location": "Cloud provider platform", "Transport": "Streamable HTTP", "Typical operator": "Cloud provider", "State": "Managed service stores", "Best fit": "Cloud resource management and provider data products", "Primary risk": "Provider IAM complexity and broad cloud authority", "Sources": "S036 S078" } } }, { "Pattern": "Enterprise MCP gateway", "Location": "Central enterprise control plane", "Transport": "Streamable HTTP upstream/downstream or adapters", "Typical operator": "Security/platform team", "State": "Policy, identity and audit store", "Best fit": "Catalog, allowlists, DLP, observability and token mediation", "Primary risk": "Central policy bypass or gateway compromise", "Sources": "S037 S043", "id": "R10-TAX009", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 9, "sourceIds": [ "S037", "S043" ], "raw": { "Pattern": "Enterprise MCP gateway", "Location": "Central enterprise control plane", "Transport": "Streamable HTTP upstream/downstream or adapters", "Typical operator": "Security/platform team", "State": "Policy, identity and audit store", "Best fit": "Catalog, allowlists, DLP, observability and token mediation", "Primary risk": "Central policy bypass or gateway compromise", "Sources": "S037 S043" } } }, { "Pattern": "Remote server behind local proxy", "Location": "Remote service plus local launcher", "Transport": "stdio to proxy; HTTP to server", "Typical operator": "Client/vendor", "State": "Proxy token/cache plus remote state", "Best fit": "Legacy clients without native remote/OAuth support", "Primary risk": "Both local package and remote network/token risk", "Sources": "S067 S075", "id": "R10-TAX010", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 10, "sourceIds": [ "S067", "S075" ], "raw": { "Pattern": "Remote server behind local proxy", "Location": "Remote service plus local launcher", "Transport": "stdio to proxy; HTTP to server", "Typical operator": "Client/vendor", "State": "Proxy token/cache plus remote state", "Best fit": "Legacy clients without native remote/OAuth support", "Primary risk": "Both local package and remote network/token risk", "Sources": "S067 S075" } } }, { "Pattern": "Serverless stateless remote", "Location": "Functions/edge/serverless", "Transport": "Streamable HTTP", "Typical operator": "Vendor/team", "State": "External DB/KV/task store or explicit handles", "Best fit": "Bursty workloads and simple tools", "Primary risk": "Cold starts, execution limits and state/streaming constraints", "Sources": "S035 S045", "id": "R10-TAX011", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 11, "sourceIds": [ "S035", "S045" ], "raw": { "Pattern": "Serverless stateless remote", "Location": "Functions/edge/serverless", "Transport": "Streamable HTTP", "Typical operator": "Vendor/team", "State": "External DB/KV/task store or explicit handles", "Best fit": "Bursty workloads and simple tools", "Primary risk": "Cold starts, execution limits and state/streaming constraints", "Sources": "S035 S045" } } }, { "Pattern": "Hybrid local and remote host", "Location": "Both user machine and hosted services", "Transport": "stdio plus Streamable HTTP", "Typical operator": "Multiple", "State": "Split by capability", "Best fit": "Local files/IDE plus SaaS/enterprise systems", "Primary risk": "Identity, provenance and data crossing boundaries", "Sources": "S019 S027", "id": "R10-TAX012", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "curated-dataset-level-evidence; not an archive row-level citation mapping", "archive": { "namespace": "research/10/deployment_taxonomy.json", "row": 12, "sourceIds": [ "S019", "S027" ], "raw": { "Pattern": "Hybrid local and remote host", "Location": "Both user machine and hosted services", "Transport": "stdio plus Streamable HTTP", "Typical operator": "Multiple", "State": "Split by capability", "Best fit": "Local files/IDE plus SaaS/enterprise systems", "Primary risk": "Identity, provenance and data crossing boundaries", "Sources": "S019 S027" } } } ] }