default scope request
The set of permissions a client asks for when the server gives it no narrower instruction. If a login challenge names no scope, many clients request every scope the server lists, including write and admin rights, and the person approving rarely reads the list.
What default scope request means
Servers can prevent this by naming the minimum scope in their WWW-Authenticate challenge.
Related terms in Agents and protocols
How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
protected-resource metadata · token audience · PKCE · refresh token · tool poisoning · tool lockfile · MCP rug pull · tool shadowing · MCP preflight · agent manifest · stapled verdict · verdict over DNS · agentic web · preflight · decision receipt · receipt header · action assurance · resolve answer · freshness window · AI agent · Agent loop · Planner · Executor · Agent memory · Working memory · Long-term memory · Episodic memory · Semantic memory · Agent orchestration · Multi-agent system · Agent handoff · Delegation · Tool result · Tool schema · Tool description · Tool selection · Tool permission · Human-in-the-loop · Human-on-the-loop · Approval gate · Agent sandbox · Agent identity · Agent authorization · Agent discovery · Capability negotiation · MCP server · MCP client · MCP host · MCP resource · MCP prompt · MCP tool · MCP transport · JSON-RPC · A2A protocol · A2A client · A2A server · Agent skill · Agent task · Agent artifact · WebMCP · A2A
Questions about default scope request
What is default scope request?
The set of permissions a client asks for when the server gives it no narrower instruction. If a login challenge names no scope, many clients request every scope the server lists, including write and admin rights, and the person approving rarely reads the list.
Which area of the glossary does default scope request belong to?
Agents and protocols: How autonomous agents plan, remember, call tools and talk to each other, including MCP and A2A, and where each step can go wrong.
← refresh token · tool poisoning →
See it in the full glossary · 731 terms across 19 areas.