{ "title": "Local vs Remote MCP Myths and Evidence", "schemaVersion": "1.0", "researchFreeze": "2026-08-26", "protocolRevision": "MCP 2026-07-28", "sourcePackage": "research/10", "integrityNote": "All 108 listed ordinary archive payloads verify. The package contains two incompatible numeric source namespaces; public records preserve an explicit archive namespace and never resolve IDs across families.", "evidencePolicy": "Only manually curated build_context source groups appear in sourceIds. Raw row tokens are preserved under archive and are not treated as publication citations.", "checkedAt": "2026-08-26", "count": 35, "records": [ { "Myth": "Local MCP servers are always safer.", "Assessment": "False", "Evidence-based correction": "They run code under local authority and may access files, secrets, processes and network resources.", "id": "R10-MYTH001", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 1, "sourceIds": [], "raw": { "Myth": "Local MCP servers are always safer.", "Assessment": "False", "Evidence-based correction": "They run code under local authority and may access files, secrets, processes and network resources." } } }, { "Myth": "Remote MCP servers are always public SaaS.", "Assessment": "False", "Evidence-based correction": "They can be private, single-tenant, on-premises or customer hosted.", "id": "R10-MYTH002", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 2, "sourceIds": [], "raw": { "Myth": "Remote MCP servers are always public SaaS.", "Assessment": "False", "Evidence-based correction": "They can be private, single-tenant, on-premises or customer hosted." } } }, { "Myth": "Every local server uses stdio.", "Assessment": "False", "Evidence-based correction": "Local HTTP and custom stream transports are possible.", "id": "R10-MYTH003", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 3, "sourceIds": [], "raw": { "Myth": "Every local server uses stdio.", "Assessment": "False", "Evidence-based correction": "Local HTTP and custom stream transports are possible." } } }, { "Myth": "Every remote server uses OAuth.", "Assessment": "False", "Evidence-based correction": "Remote services may be authless or use preconfigured tokens.", "id": "R10-MYTH004", "sourceIds": [ "S133", "S471", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S488" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 4, "sourceIds": [], "raw": { "Myth": "Every remote server uses OAuth.", "Assessment": "False", "Evidence-based correction": "Remote services may be authless or use preconfigured tokens." } } }, { "Myth": "Current remote MCP uses the original HTTP+SSE transport.", "Assessment": "False", "Evidence-based correction": "Streamable HTTP replaced it; current SSE is request/subscription scoped.", "id": "R10-MYTH005", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 5, "sourceIds": [], "raw": { "Myth": "Current remote MCP uses the original HTTP+SSE transport.", "Assessment": "False", "Evidence-based correction": "Streamable HTTP replaced it; current SSE is request/subscription scoped." } } }, { "Myth": "MCP no longer uses SSE at all.", "Assessment": "False", "Evidence-based correction": "Streamable HTTP can return SSE streams.", "id": "R10-MYTH006", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 6, "sourceIds": [], "raw": { "Myth": "MCP no longer uses SSE at all.", "Assessment": "False", "Evidence-based correction": "Streamable HTTP can return SSE streams." } } }, { "Myth": "Stateless MCP cannot maintain workflows.", "Assessment": "False", "Evidence-based correction": "Applications use explicit handles, task stores and databases.", "id": "R10-MYTH007", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 7, "sourceIds": [], "raw": { "Myth": "Stateless MCP cannot maintain workflows.", "Assessment": "False", "Evidence-based correction": "Applications use explicit handles, task stores and databases." } } }, { "Myth": "Mcp-Session-Id is required for every remote server.", "Assessment": "Outdated", "Evidence-based correction": "It belongs to handshake-era Streamable HTTP, not modern 2026-07-28 operation.", "id": "R10-MYTH008", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 8, "sourceIds": [], "raw": { "Myth": "Mcp-Session-Id is required for every remote server.", "Assessment": "Outdated", "Evidence-based correction": "It belongs to handshake-era Streamable HTTP, not modern 2026-07-28 operation." } } }, { "Myth": "A remote server can automatically access localhost.", "Assessment": "False", "Evidence-based correction": "It needs a bridge, tunnel, upload or network path.", "id": "R10-MYTH009", "sourceIds": [ "S258", "S462", "S463", "S145", "S464", "S259", "S175", "S140", "S141", "S269", "S465", "S274", "S144", "S466", "S284" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 9, "sourceIds": [], "raw": { "Myth": "A remote server can automatically access localhost.", "Assessment": "False", "Evidence-based correction": "It needs a bridge, tunnel, upload or network path." } } }, { "Myth": "A local server keeps all data local.", "Assessment": "False", "Evidence-based correction": "The host/model or upstream APIs may transmit data.", "id": "R10-MYTH010", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 10, "sourceIds": [], "raw": { "Myth": "A local server keeps all data local.", "Assessment": "False", "Evidence-based correction": "The host/model or upstream APIs may transmit data." } } }, { "Myth": "stdio authenticates the server.", "Assessment": "False", "Evidence-based correction": "stdio defines transport and process lifecycle, not publisher identity.", "id": "R10-MYTH011", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 11, "sourceIds": [], "raw": { "Myth": "stdio authenticates the server.", "Assessment": "False", "Evidence-based correction": "stdio defines transport and process lifecycle, not publisher identity." } } }, { "Myth": "No port means no security problem.", "Assessment": "False", "Evidence-based correction": "Untrusted local code remains a major security boundary.", "id": "R10-MYTH012", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 12, "sourceIds": [], "raw": { "Myth": "No port means no security problem.", "Assessment": "False", "Evidence-based correction": "Untrusted local code remains a major security boundary." } } }, { "Myth": "Localhost HTTP is equivalent to stdio.", "Assessment": "False", "Evidence-based correction": "It introduces a web/network origin boundary and DNS-rebinding risk.", "id": "R10-MYTH013", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 13, "sourceIds": [], "raw": { "Myth": "Localhost HTTP is equivalent to stdio.", "Assessment": "False", "Evidence-based correction": "It introduces a web/network origin boundary and DNS-rebinding risk." } } }, { "Myth": "OAuth makes a remote server secure.", "Assessment": "False", "Evidence-based correction": "Authorization, tenancy, scope and tool implementation can still fail.", "id": "R10-MYTH014", "sourceIds": [ "S133", "S471", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S488" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 14, "sourceIds": [], "raw": { "Myth": "OAuth makes a remote server secure.", "Assessment": "False", "Evidence-based correction": "Authorization, tenancy, scope and tool implementation can still fail." } } }, { "Myth": "A host confirmation authorizes the operation.", "Assessment": "False", "Evidence-based correction": "It indicates user intent; server/upstream permissions still govern access.", "id": "R10-MYTH015", "sourceIds": [ "S258", "S462", "S463", "S145", "S464", "S259", "S175", "S140", "S141", "S269", "S465", "S274", "S144", "S466", "S284" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 15, "sourceIds": [], "raw": { "Myth": "A host confirmation authorizes the operation.", "Assessment": "False", "Evidence-based correction": "It indicates user intent; server/upstream permissions still govern access." } } }, { "Myth": "Remote MCP is always slower.", "Assessment": "Unsupported", "Evidence-based correction": "Network cost may be outweighed by warm services and proximity to data.", "id": "R10-MYTH016", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 16, "sourceIds": [], "raw": { "Myth": "Remote MCP is always slower.", "Assessment": "Unsupported", "Evidence-based correction": "Network cost may be outweighed by warm services and proximity to data." } } }, { "Myth": "Local MCP is free.", "Assessment": "False", "Evidence-based correction": "Packaging, support, updates and endpoint management have real costs.", "id": "R10-MYTH017", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 17, "sourceIds": [], "raw": { "Myth": "Local MCP is free.", "Assessment": "False", "Evidence-based correction": "Packaging, support, updates and endpoint management have real costs." } } }, { "Myth": "One remote process serves all users.", "Assessment": "False", "Evidence-based correction": "The logical server can be replicated behind infrastructure.", "id": "R10-MYTH018", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 18, "sourceIds": [], "raw": { "Myth": "One remote process serves all users.", "Assessment": "False", "Evidence-based correction": "The logical server can be replicated behind infrastructure." } } }, { "Myth": "A registry listing proves code safety.", "Assessment": "False", "Evidence-based correction": "Registry metadata is not a runtime audit.", "id": "R10-MYTH019", "sourceIds": [ "S018", "S481", "S066", "S067" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 19, "sourceIds": [], "raw": { "Myth": "A registry listing proves code safety.", "Assessment": "False", "Evidence-based correction": "Registry metadata is not a runtime audit." } } }, { "Myth": "MCPB is a remote hosting format.", "Assessment": "False", "Evidence-based correction": "It packages a local MCP server for desktop distribution.", "id": "R10-MYTH020", "sourceIds": [ "S258", "S462", "S463", "S145", "S464", "S259", "S175", "S140", "S141", "S269", "S465", "S274", "S144", "S466", "S284" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 20, "sourceIds": [], "raw": { "Myth": "MCPB is a remote hosting format.", "Assessment": "False", "Evidence-based correction": "It packages a local MCP server for desktop distribution." } } }, { "Myth": "A container automatically sandboxes a local server.", "Assessment": "False", "Evidence-based correction": "Mounts, privileges and network settings determine isolation.", "id": "R10-MYTH021", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 21, "sourceIds": [], "raw": { "Myth": "A container automatically sandboxes a local server.", "Assessment": "False", "Evidence-based correction": "Mounts, privileges and network settings determine isolation." } } }, { "Myth": "Remote means the data leaves the enterprise.", "Assessment": "False", "Evidence-based correction": "A private remote server can run within enterprise infrastructure.", "id": "R10-MYTH022", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 22, "sourceIds": [], "raw": { "Myth": "Remote means the data leaves the enterprise.", "Assessment": "False", "Evidence-based correction": "A private remote server can run within enterprise infrastructure." } } }, { "Myth": "Local means only one user can ever use it.", "Assessment": "Too absolute", "Evidence-based correction": "A shared local daemon can serve several clients, though it needs isolation.", "id": "R10-MYTH023", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 23, "sourceIds": [], "raw": { "Myth": "Local means only one user can ever use it.", "Assessment": "Too absolute", "Evidence-based correction": "A shared local daemon can serve several clients, though it needs isolation." } } }, { "Myth": "Remote means multi-tenant.", "Assessment": "False", "Evidence-based correction": "A remote service may be dedicated to one user or tenant.", "id": "R10-MYTH024", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 24, "sourceIds": [], "raw": { "Myth": "Remote means multi-tenant.", "Assessment": "False", "Evidence-based correction": "A remote service may be dedicated to one user or tenant." } } }, { "Myth": "A local proxy removes remote security concerns.", "Assessment": "False", "Evidence-based correction": "It adds local risk without removing remote identity/network risk.", "id": "R10-MYTH025", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 25, "sourceIds": [], "raw": { "Myth": "A local proxy removes remote security concerns.", "Assessment": "False", "Evidence-based correction": "It adds local risk without removing remote identity/network risk." } } }, { "Myth": "Serverless means no state.", "Assessment": "False", "Evidence-based correction": "State can live in databases, queues, tasks and explicit handles.", "id": "R10-MYTH026", "sourceIds": [ "S467", "S468", "S471", "S472", "S473", "S474", "S475", "S476", "S478", "S479", "S480", "S486", "S487", "S488" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 26, "sourceIds": [], "raw": { "Myth": "Serverless means no state.", "Assessment": "False", "Evidence-based correction": "State can live in databases, queues, tasks and explicit handles." } } }, { "Myth": "The transport determines whether a tool is read-only.", "Assessment": "False", "Evidence-based correction": "Tool semantics and authorization are independent of transport.", "id": "R10-MYTH027", "sourceIds": [ "S057", "S132", "S131", "S055", "S058", "S053", "S027", "S038", "S037", "S320", "S044", "S321", "S187", "S135" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 27, "sourceIds": [], "raw": { "Myth": "The transport determines whether a tool is read-only.", "Assessment": "False", "Evidence-based correction": "Tool semantics and authorization are independent of transport." } } }, { "Myth": "Remote servers do not have supply-chain risk.", "Assessment": "False", "Evidence-based correction": "The operator’s build and deployment pipeline remains a supply chain.", "id": "R10-MYTH028", "sourceIds": [ "S133", "S134", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S111", "S112", "S207", "S208", "S210", "S212", "S238", "S233", "S245", "S243", "S147", "S109", "S196", "S485" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 28, "sourceIds": [], "raw": { "Myth": "Remote servers do not have supply-chain risk.", "Assessment": "False", "Evidence-based correction": "The operator’s build and deployment pipeline remains a supply chain." } } }, { "Myth": "Local servers do not need updates.", "Assessment": "False", "Evidence-based correction": "Vulnerabilities and upstream changes still require distribution and revocation.", "id": "R10-MYTH029", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 29, "sourceIds": [], "raw": { "Myth": "Local servers do not need updates.", "Assessment": "False", "Evidence-based correction": "Vulnerabilities and upstream changes still require distribution and revocation." } } }, { "Myth": "Centralized audit guarantees safe operation.", "Assessment": "False", "Evidence-based correction": "Logs can be incomplete and downstream authorization can still be wrong.", "id": "R10-MYTH030", "sourceIds": [ "S258", "S462", "S463", "S145", "S464", "S259", "S175", "S140", "S141", "S269", "S465", "S274", "S144", "S466", "S284" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 30, "sourceIds": [], "raw": { "Myth": "Centralized audit guarantees safe operation.", "Assessment": "False", "Evidence-based correction": "Logs can be incomplete and downstream authorization can still be wrong." } } }, { "Myth": "A public authless remote server is always irresponsible.", "Assessment": "Too absolute", "Evidence-based correction": "It can be appropriate for bounded public read-only data with abuse controls.", "id": "R10-MYTH031", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 31, "sourceIds": [], "raw": { "Myth": "A public authless remote server is always irresponsible.", "Assessment": "Too absolute", "Evidence-based correction": "It can be appropriate for bounded public read-only data with abuse controls." } } }, { "Myth": "Private networking replaces authentication.", "Assessment": "False", "Evidence-based correction": "Network location and caller identity are separate controls.", "id": "R10-MYTH032", "sourceIds": [ "S133", "S471", "S475", "S191", "S006", "S005", "S192", "S004", "S193", "S488" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 32, "sourceIds": [], "raw": { "Myth": "Private networking replaces authentication.", "Assessment": "False", "Evidence-based correction": "Network location and caller identity are separate controls." } } }, { "Myth": "The 2026 protocol removed all backward compatibility.", "Assessment": "False", "Evidence-based correction": "Clients and servers can probe and fall back to legacy behavior when implemented.", "id": "R10-MYTH033", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 33, "sourceIds": [], "raw": { "Myth": "The 2026 protocol removed all backward compatibility.", "Assessment": "False", "Evidence-based correction": "Clients and servers can probe and fall back to legacy behavior when implemented." } } }, { "Myth": "A successful tool call proves full compatibility.", "Assessment": "False", "Evidence-based correction": "Other capabilities, auth, transport and extensions may differ.", "id": "R10-MYTH034", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 34, "sourceIds": [], "raw": { "Myth": "A successful tool call proves full compatibility.", "Assessment": "False", "Evidence-based correction": "Other capabilities, auth, transport and extensions may differ." } } }, { "Myth": "Local versus remote is a permanent binary choice.", "Assessment": "False", "Evidence-based correction": "Many projects prototype locally, deploy remotely and retain hybrid capabilities.", "id": "R10-MYTH035", "sourceIds": [ "S121", "S057", "S132", "S131", "S133" ], "evidenceStatus": "editorially curated topic evidence; not derived from archive citation tokens", "archive": { "namespace": "research/10/myth_vs_evidence.json", "row": 35, "sourceIds": [], "raw": { "Myth": "Local versus remote is a permanent binary choice.", "Assessment": "False", "Evidence-based correction": "Many projects prototype locally, deploy remotely and retain hybrid capabilities." } } } ] }