How to meet it
OWASP AISVS v1.01
Model Context Protocol (MCP) Security · Schema, Message, and Input Validation
Ask before installing a local MCP server
Verify that MCP clients present users with explicit consent dialogue and cancellation options upon installation of a local MCP server.
OWASP AISVS v1.01, requirement 10.4.7
In plain English
Before installing a local MCP server, the client should ask the user clearly and let them cancel.
What good looks like
- Installation shows what will be installed and what it can access.
- The user must confirm.
- Cancelling leaves nothing installed.
How teams usually do it
- A consent dialog in the client's install flow.
Evidence an auditor would accept
- Screenshots of the dialog.
Common mistakes
- Installing in the background when a link is clicked.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.