How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Authentication & Authorization
MCP servers don't store tokens
Verify that MCP servers acting as OAuth 2.1 resource servers do not store or persist access tokens or user credentials.
OWASP AISVS v1.01, requirement 10.2.3
In plain English
MCP servers acting as OAuth resource servers should not store access tokens or user credentials.
What good looks like
- Tokens are used per request and not saved.
- Logs do not contain tokens.
- No credential store exists on the server.
How teams usually do it
- Code review and log redaction for authorisation headers.
Evidence an auditor would accept
- Log samples and storage review.
Common mistakes
- Logging full request headers, including tokens.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.