How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Authentication & Authorization
Bind client credentials to their issuer
Verify that MCP clients bind persisted OAuth client credentials to the issuing authorization server and do not present them to a different authorization server.
OWASP AISVS v1.01, requirement 10.2.9
In plain English
MCP clients should use saved OAuth client credentials only with the authorisation server that issued them.
What good looks like
- Stored credentials are linked to their issuer.
- The client refuses to present them elsewhere.
- Tests try a different issuer.
How teams usually do it
- Storing issuer with credentials and checking it before use.
Evidence an auditor would accept
- Client code and tests.
Common mistakes
- Using one stored client secret with whichever server asks.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.