How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Authentication & Authorization
Use one-time request state only once
Verify that MCP servers enforce single use server-side for `requestState` that must be consumed at most once.
OWASP AISVS v1.01, requirement 10.2.10
In plain English
Where request state must be used once, enforce that on the server.
What good looks like
- Single-use state is tracked on the server.
- Reuse is rejected.
- Tracking survives restarts as needed.
How teams usually do it
- A server-side store of used state identifiers with expiry.
Evidence an auditor would accept
- Tests with replayed state.
Common mistakes
- Relying on the client to discard state.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.