THIRD_PARTY_NOTICES.md

# Third-party notices

## MCP Server Engineering Field Guide

MCP Boundary redistributes selected reference files from:

- Project: MCP Server Engineering Field Guide
- Repository: <https://github.com/IndelibleVivi/mcp-server-engineering-field-guide>
- Source revision: `87238302209d654358dd64eb3972677e4cacf256`
- License for the copied `skill/` material: Apache License 2.0
- License text: [`LICENSES/Apache-2.0.txt`](LICENSES/Apache-2.0.txt)

The exact copied paths and SHA-256 values are recorded in [`provenance/SOURCES.json`](provenance/SOURCES.json). The copies retain their upstream license; inclusion does not relicense them under SUL-1.0 or CC BY-NC-SA 4.0.

The maintained Guide validators under `tools/guide-validation/` are Apache-2.0 derivatives of the historical skill scripts from the same pinned revision. Their path mappings are recorded in `provenance/SOURCES.json`. The active profile-mirror validator was changed to remove the historical write mode; current tooling verifies the frozen snapshot but cannot regenerate it.

MCP Boundary's authored `SKILL.md`, `boundary-model.md`, `evidence.md`, and `migration.md` are new project material. They are not represented as upstream Field Guide files.

## Referenced standards and documentation

The bundled profiles summarize or point to public technical standards and official documentation, including Model Context Protocol, JSON-RPC 2.0, and HTTP RFCs. Those underlying specifications and trademarks remain governed by their respective rights holders. Links are references, not bundled copies unless explicitly listed above.