How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Schema, Message, and Input Validation
Open elicitation pages out of the model's sight
Verify that MCP clients open URL-mode elicitation targets so that neither the client nor the model can observe the page contents or the user's input.
OWASP AISVS v1.01, requirement 10.4.21
In plain English
Open elicitation pages so that neither the client nor the model can see what is on the page or what the user types.
What good looks like
- Elicitation opens in the system browser or an isolated view.
- The client cannot read page content or input.
- The model receives only the outcome.
How teams usually do it
- Opening URLs in the user's default browser.
Evidence an auditor would accept
- Client design and tests.
Common mistakes
- Rendering the page in an embedded view the client can read.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.