CLAIM-2026-08-26-04
The MCP specification describes roots as "informational guidance rather than an access-control mechanism" and states that "the protocol does not enforce that servers stay within roots"; respecting root boundaries is a SHOULD-level obligation on servers, not a MUST.
Why it matters
It disposes of the obvious reading. Nothing enforceable is being removed, because nothing enforceable was ever there.
Sources
- modelcontex2026roots