Elicitation
An MCP capability that lets a server pause and ask the user for additional input mid-task, through the client.
Added to the protocol in the 2025-06-18 specification revision, elicitation lets a server send a structured request for information ("which account?", "confirm the amount") that the client renders to the user and returns the answer. It is meant to make interactive workflows possible without the server holding its own UI.
Why it matters
Elicitation puts server-authored text into a trusted-looking prompt in front of the user. A malicious or compromised server can use it for social engineering — asking for a credential, a one-time code, or approval of something the user doesn't fully understand, styled to look like it comes from the client itself. Clients that render elicitation requests need to make the source unmistakable and constrain what can be asked.
Exposure map
Live counts of instances showing this pattern will appear here once the exposure map is collecting data.