CourseModel Context Protocol: The Complete Course · Module 4: Resources, Prompts, and User Interaction · part 28 of 77
Part 28 · Module 4: Resources, Prompts, and User Interaction

Lesson 1: Resources, notes you can open by address

19 min read·13 Oct 2026
Module 4 · Lesson 1 · About 40 minutes · Needs: Module 1 Lesson 4 (who decides: model, application, user) and Module 3 (a tool that returns results); no model key for this lesson

The situation

Thursday 17 September 2026. Nare wants to drop the lab sync note into a chat by name, without waiting for the model to search. Her desktop assistant's picker lists only what a server offers as resources, so the notes server needs addresses: notes://index for the list and one per note, such as notes://lab-sync-2026-09-02.

The catch: next to notes/ sits notes-private/, with reviewers' comments that must never reach an assistant (made up, added in this lesson). An address the client chooses is one an attacker can choose too.

WHAT THE SERVER MAY SERVE notes server MCP, notes:// notes/ 3 notes, served notes-private/ reviewer comments never
The notes server must serve notes/ and nothing beside it, such as notes-private/ (blue is your system, green is allowed, red is what must never be served).

The rest of this course is yours to keep

This course is bought on its own, once, and stays readable afterwards, including the parts added to it later.