How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Schema, Message, and Input Validation
Ask before opening elicitation URLs
Verify that MCP clients require explicit user consent and display the full URL before opening any URL-mode elicitation target, and do not pre-fetch the URL or its metadata.
OWASP AISVS v1.01, requirement 10.4.20
In plain English
Before opening an elicitation URL, the client shows the full URL and asks the user. It does not fetch the page or its metadata beforehand.
What good looks like
- The full URL is shown.
- The user must agree before it opens.
- No pre-fetching or link previews.
How teams usually do it
- A consent dialog in the client that displays the URL.
Evidence an auditor would accept
- Screenshots and network traces showing no pre-fetch.
Common mistakes
- Generating a link preview, which sends a request before the user agrees.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.