Before every request reaches the model, an organization's own security server inspects the content first and returns an allow-or-deny verdict, which Claude enforces in real time — rather than relying on after-the-fact audits to catch problems retroactively.

A way for a user to authorize a third-party application without handing over their password directly — instead, the user's existing identity system issues a scope-limited access <a href="https://claude-me.com/en/glossary/core-concepts/token/" target="_blank" rel="noopener">Token</a> that the application uses to act on the user's behalf, strictly within what was authorized.

A bundle that packages tools, commands, and skills into one installable unit, letting Claude gain the full set of capabilities needed for a category of work at once, instead of connecting each piece separately.

A protocol design where every interaction is an independent, self-contained request that doesn't depend on the record of a previous connection, so servers don't need to stay running just to remember connection state — they can deploy directly on spin-up-and-tear-down compute environments.