I-D Action: draft-sharif-mcps-secure-mcp-01.txt
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178735024682.75298.10504460479821789176@dt-datatracker-786f84c586-97d96> |
Internet-Draft draft-sharif-mcps-secure-mcp-01.txt is now available. Title: MCPS: Cryptographic Security Layer for the Model Context Protocol Author: Raza Sharif Name: draft-sharif-mcps-secure-mcp-01.txt Pages: 43 Dates: 2026-08-21 Abstract: This document specifies MCPS (MCP Secure), a cryptographic security layer for the Model Context Protocol (MCP). MCPS adds agent identity verification, per-message signing, tool definition integrity, and replay protection to MCP communications without modifying the core protocol. MCPS operates as an envelope around existing JSON-RPC messages. It introduces four primitives: (1) Agent Passports for cryptographic identity bound to a specific origin, (2) signed message envelopes for integrity and non-repudiation, (3) tool definition signatures covering the full tool object for detecting poisoning and tampering, and (4) nonce-plus-timestamp replay protection with transcript binding to prevent downgrade attacks. The design is fully backward-compatible. MCPS-unaware clients and servers continue to function normally. MCPS-aware endpoints progressively negotiate security capabilities through trust levels L0 (no verification) through L4 (full mutual authentication with revocation checking). All cryptographic operations use ECDSA P-256 (NIST FIPS 186-5). Signatures use IEEE P1363 fixed-length r||s encoding per RFC 7518 Section 3.4 with low-S normalization to prevent signature malleability. Canonical serialization uses JSON Canonicalization Scheme (JCS) per RFC 8785. The Trust Authority component is self-hostable with no external service dependency. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-sharif-mcps-secure-mcp/ There is also an HTMLized version available at: https://datatracker.ietf.org/doc/html/draft-sharif-mcps-secure-mcp-01 A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-sharif-mcps-secure-mcp-01 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]