consent-and-scoping
Installation
SKILL.md
Consent and Granular Scoping for MCP Servers
Security Requirement
MCP servers MUST implement granular OAuth scopes and ensure users explicitly consent to them. Scopes should map to specific tool capabilities, not broad "access everything" permissions.
Granular Scope Design
Define scopes at the tool and action level:
| Scope | Permission |
|---|---|
email.send |
Send emails via the email tool |
email.read |
Read emails via the email tool |
files.read |
Read files via the filesystem tool |
files.write |
Write files via the filesystem tool |
database.query |
Execute read-only database queries |
database.modify |
Execute write database operations |