--- title: "Confused deputy: definition and example | Agent MCP Directory" description: "Confused deputy: An attack where a proxy with its own credentials is tricked into acting for someone else. Defined with a sourced example." canonical: https://agentmcpdirectory.com/glossary/confused-deputy site: "Agent MCP Directory" last_updated: 2026-11-04 section: "Glossary" --- # Confused deputy: definition and example | Agent MCP Directory > Confused deputy: An attack where a proxy with its own credentials is tricked into acting for someone else. Defined with a sourced example. Source: https://agentmcpdirectory.com/glossary/confused-deputy Site: Agent MCP Directory Last reviewed: 2026-11-04 # Confused deputy Confused deputy: An attack where a proxy with its own credentials is tricked into acting for someone else; MCP security guidance addresses it for OAuth proxies. Example: Vercel MCP requires explicit consent for each client connection to prevent it. Next in the glossary is document.modelContext: The WebMCP entry point on the document object that holds registerTool, getTools and executeTool. ## Definition An attack where a proxy with its own credentials is tricked into acting for someone else; MCP security guidance addresses it for OAuth proxies. ## Example, with source Vercel MCP requires explicit consent for each client connection to prevent it. ([vercel.com](https://vercel.com/docs/agent-resources/vercel-mcp), read 4 November 2026) ## Where it appears on this site - [MCP](https://agentmcpdirectory.com/standards/mcp/) - [OAuth for MCP](https://agentmcpdirectory.com/guides/oauth-for-mcp-cimd-dcr/) - [Building a remote MCP server](https://agentmcpdirectory.com/guides/build-remote-mcp-server-cloudflare-vercel/) ## Neighbouring terms - [Code Mode](https://agentmcpdirectory.com/glossary/code-mode/): A Cloudflare approach where the agent writes code against a typed API instead of calling many tools one by one, set by portal policy. - [document.modelContext](https://agentmcpdirectory.com/glossary/document-modelcontext/): The WebMCP entry point on the document object that holds registerTool, getTools and executeTool. - [Dynamic Client Registration (DCR)](https://agentmcpdirectory.com/glossary/dynamic-client-registration/): RFC 7591 registration where a client POSTs to /register for credentials; deprecated in MCP 2026-07-28 and kept for compatibility. Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/glossary/confused-deputy/index.md) ## Sources - [Source for the Confused deputy example](https://vercel.com/docs/agent-resources/vercel-mcp), read 4 November 2026 Last reviewed 4 November 2026