How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Authentication & Authorization
Check the token on every MCP request
Verify that MCP servers validate access tokens for each request and do not rely on transport security alone.
OWASP AISVS v1.01, requirement 10.2.1
In plain English
MCP servers must check the access token on every request. An encrypted connection on its own says nothing about who is calling.
What good looks like
- Every request is authenticated.
- Missing or invalid tokens are rejected.
- There is no unauthenticated mode in production.
How teams usually do it
- Token validation middleware on every endpoint.
Evidence an auditor would accept
- Server code and tests with missing tokens.
Common mistakes
- Authenticating at connection time only.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.