MCP Roots
Industry Definition Set • Entity Resolution Path: /glossary/mcp-roots
Quick Answer / TL;DR
URI-based boundary declarations from the client that tell the server which file system locations or namespaces the client has granted access to.
Key Takeaways
- Client-declared access boundaries for filesystem or namespace resources.
- Prevents servers from reading files outside the agreed scope.
- Sent during the client's initialize request.
- Essential for secure filesystem MCP integrations.
Definitive Statement: URI-based boundary declarations from the client that tell the server which file system locations or namespaces the client has granted access to.
Technical Context & Protocol Usage
- Detailed Explanation
- Roots prevent MCP servers from accessing files outside an agreed-upon boundary. The client sends a list of root URIs (e.g., `file:///Users/alice/projects`) during initialization. The server must respect these boundaries when exposing resources or executing tools. This is a critical security control for filesystem MCP servers.
Format & Payload Metadata
Format: List of root URI strings
Latency: Evaluated at initialization; minimal ongoing overhead
Real-World Implementation Use Case
Claude Desktop declares `file:///Users/alice/work` as its only root, so a filesystem MCP server cannot read `file:///Users/alice/private`.
Cite This Page
MLA Style:
MCPserver.in Engineering. "MCP Roots." MCPserver.in Knowledge Hub, 20 July 2026, mcpserver.in/glossary/mcp-roots.
Related Terms
Model Context Protocol (MCP)
An open, secure protocol that standardizes how artificial intelligence agents and large language models (LLMs) exchange context, tools, prompts, and data resources with external servers.
JSON-RPC 2.0
A lightweight, stateless remote procedure call (RPC) protocol defined in JSON that utilizes request, response, and notification message frames.
Stdio Transport (Standard Input/Output)
A local-only transport mechanism where the AI client spawns the MCP server as a child process and communicates via standard input (stdin) and standard output (stdout) channels.
SSE Transport (Server-Sent Events)
A lightweight, unidirectional HTTP-based streaming protocol used by remote MCP servers to push messages to AI clients, with client-to-server writes sent over standard POST requests.
Deploy Secure MCP Clusters
Run remote SSE Model Context Protocol servers in highly secure, fully-managed environment located inside India (Mumbai/Bengaluru).
Deploy Node Now