How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Schema, Message, and Input Validation
Keep personal data out of elicitation URLs
Verify that MCP servers exclude end-user credentials and personal data from URL-mode elicitation URLs, and do not issue URLs that are pre-authenticated to a protected resource.
OWASP AISVS v1.01, requirement 10.4.19
In plain English
Keep credentials and personal data out of elicitation URLs, and do not issue URLs that log someone straight into a protected resource.
What good looks like
- URLs contain no credentials or personal data.
- URLs require normal sign-in.
- URLs are checked in code review.
How teams usually do it
- Opaque, single-use references in URLs instead of data.
Evidence an auditor would accept
- URL samples and code.
Common mistakes
- Pre-authenticated links that work for anyone who gets hold of them.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.