Roots (MCP)
Roots are a Model Context Protocol mechanism for a client to tell a server which filesystem directories it's permitted to operate within, exposed through a client capability the server can query at the start of a session. A client exposing roots -- for example, a desktop AI application with a project folder open -- advertises one or more URIs as its roots, and a well-behaved server is expected to confine any file operations its tools perform to those boundaries rather than reaching elsewhere on disk. Roots are advisory in the specification, not an enforced sandbox: a server still has to honor them voluntarily, so they reduce the chance of a tool call touching an unrelated directory by mistake rather than guaranteeing it can't happen against a server that ignores the signal.
By AdminKit team, Netbase JSC · Updated