Implement SEP-1024: MCP Client Security Requirements

[felixweinberger]

This is a tracking issue for implementation of SEP-1024.

Summary

This SEP establishes comprehensive security requirements for MCP clients that support one-click local server installation and configuration. The TypeScript SDK needs to implement clear consent dialogs before executing server installation commands, display full command text without truncation, and provide strong recommendations for sandboxed execution environments using platform-appropriate technologies. Additionally, client implementations should provide security guidance for server developers regarding stdio transport usage and authorization token requirements for HTTP transport.

Related Issues & PRs

• Implementation PRs: n/a
• Related PRs: n/a
• Related Issues: n/a

[felixweinberger]

Investigated with @KKonstantinov this actually does not have any implementation requirements.

It's guidance for client implementors for how to structure their clients - not something we can or should be ensuring at the SDK level.