[jmsn]

Make UI resource permissions open-ended and add named permissions fullscreen, picture-in-picture, autoplay and encrypted-media.

Motivation and Context

MCP Apps that play video need Permission Policy features the spec does not list: the Fullscreen API, Picture-in-Picture, autoplay with sound and Encrypted Media Extensions for DRM playback (#757).

The closed list in McpUiResourcePermissions also means every new feature needs a spec change, which #320 wants to move away from.

Four changes:

1. Use Permission Policy feature names verbatim as permission keys, without a key-to-feature-name translation step: add clipboard-write as the canonical key for clipboard write access and keep clipboardWrite as a deprecated legacy alias.
2. Add named permissions for fullscreen, picture-in-picture, autoplay and encrypted-media.
3. Allow requesting Permission Policy features that are not explicitly named: add a string index signature to McpUiResourcePermissions. Hosts SHOULD recognize the named keys, MAY honor other feature names, and MUST NOT apply keys that are not valid feature names.
4. Declare the four media permissions in the video example, so the native video controls show them taking effect in basic-host.

This mix of named keys and an open map follows an existing pattern, for example in this SDK's McpUiHostContext.

How Has This Been Tested?

• src/app-bridge.test.ts: unit tests for buildAllowAttribute covering the named keys, pass-through, invalid keys and the alias.
• npm run build, npm test, npm run prettier and typedoc --treatValidationWarningsAsErrors pass.
• Manually, using basic-host with the video MCP example in Chrome:
  Both the outer and the inner iframe get allow="fullscreen; picture-in-picture; autoplay; encrypted-media" and the native fullscreen control is enabled; without the declaration there is no allow attribute and the control is disabled.

Breaking Changes

None, existing keys keep their meaning.

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update

Checklist

• I have read the MCP Documentation
• My code follows the repository's style guidelines
• New and existing tests pass locally
• I have added appropriate error handling
• I have added or updated documentation as needed

Additional context

• Partially addresses Extend permission-policy negotiation for media/video widgets (fullscreen, presentation/Cast, remote-playback, PiP, encrypted-media) #757; presentation and remote-playback are not Permission Policy features and need a different mechanism.
• Covers the Permission Policy side of Finalize permissions #320; the sandbox flags remain with feat: add sandbox flags negotiation #355.

[Copilot]

🟢 Approval recommended

No active review issues block the media-permission and allow-attribute changes.

No open issues 🎉

What changed in this PR

Extends the MCP Apps SDK’s UI resource permissions to support media playback capabilities and additional Permission Policy feature names, while retaining the legacy clipboard alias.

Changes:

• Adds four named media permissions and canonical clipboard-write, with corresponding type, schema, and draft specification updates.
• Updates buildAllowAttribute to pass through feature-name tokens, filter malformed keys, and deduplicate aliases, with unit tests.
• Declares media permissions in the video example.

File	Description
src/​spec.types.ts	Extends permission types and documents the deprecated clipboard alias.
src/​generated/​schema.ts	Adds named permissions and preserves additional keys during parsing.
src/​generated/​schema.json	Reflects the expanded permission model in generated JSON schemas.
src/​app-bridge.ts	Converts permission keys into validated, deduplicated allow directives.
src/​app-bridge.test.ts	Covers media permissions, pass-through keys, filtering, and aliases.
specification/​draft/​apps.mdx	Documents extensible permissions and host handling requirements.
examples/​video-resource-server/​server.ts	Requests fullscreen, picture-in-picture, autoplay, and encrypted-media permissions.

_{Review effort: Balanced}