modelcontextprotocol/ext-apps
Watch
1
0
Fork
You've already forked ext-apps
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: remove redundant resource-type bullets from download-file spec

Browse source 
Remove bullets that restate standard EmbeddedResource/ResourceLink behavior
already defined in the MCP resource spec. Keep download-specific host behavior
(confirmation dialog, filename derivation, security policy, path sanitization).
This commit is contained in:
Anton Pidkuiko MacBook 2026-02-23 13:08:34 +00:00
commit f07bdfbe27
No known key found for this signature in database
1 changed files with 0 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
specification/draft/apps.mdx
View file

@ -1079,8 +1079,6 @@ The `contents` array uses standard MCP resource types (`EmbeddedResource` and `R
Host behavior:
* Host SHOULD show a confirmation dialog before initiating the download.
* For `EmbeddedResource`, host SHOULD derive the filename from the last segment of `resource.uri`.
* For `EmbeddedResource` with `blob`, host MUST decode the content from base64 before creating the file.
* For `ResourceLink`, host MAY fetch the resource on behalf of the app or open the URI directly.
* Host MAY reject the download based on security policy, file size limits, or user preferences.
* Host SHOULD sanitize filenames to prevent path traversal.