Monthly downloads of the Model Context Protocol's main SDKs are approaching half a billion, according to the Linux Foundation's launch announcement. That number explains why, on September 14, 2026, the Agentic AI Foundation and Linux Foundation Education released the first vendor-neutral certification for it: the Model Context Protocol Associate, or MCPA.
This guide covers what the MCPA exam tests, what it costs, who it's for, and how to prepare, using the Linux Foundation's certification page and launch materials as the source for every figure.
What is the MCPA certification?
MCPA (Model Context Protocol Associate) is a foundational, vendor-neutral certification from the Linux Foundation and the Agentic AI Foundation that validates understanding of the Model Context Protocol: its concepts, architecture, interaction model, security considerations and ecosystem.
MCP is the open protocol that lets AI agents and applications connect to external tools and data through one standard interface instead of bespoke integrations. David Soria Parra, co-creator and lead maintainer of MCP, put the original goal simply: "We built MCP so developers could rely on one open protocol instead of writing custom integrations for every system."
The certification sits at associate level. It's knowledge-based and multiple-choice, not a hands-on lab. The Linux Foundation describes the audience as engineers, platform teams and AI governance professionals who need to show they understand how MCP connections work and how to implement them responsibly.
What are the MCPA exam details?
The MCPA is an online, proctored, multiple-choice exam priced at US$250, valid for two years, with a 12-month eligibility window and one free retake included.
From the official certification page:
- Format: online, proctored, multiple-choice
- Duration: the certification page lists 90 minutes; the September 2026 launch press release described a 120-minute exam. Check the duration shown at booking.
- Price: US$250 for the exam alone, or US$495 bundled with a THRIVE-ONE annual subscription
- Validity: two years
- Eligibility window: 12 months from purchase to sit the exam
- Retakes: one retake included
- Specification version: aligned to the MCP specification dated 2026-07-28
Two details are not published on the certification page: the exact number of questions and the passing score. Treat any figure you see elsewhere for those as unverified until the Linux Foundation states it.
What are the five MCPA exam domains?
The exam has five weighted domains. Interactions & Execution (26%) and Security & Governance (24%) together make up half the exam.
| Domain | Weight |
|---|---|
| MCP Fundamentals | 16% |
| Architecture & Components | 14% |
| Interactions & Execution | 26% |
| Security & Governance | 24% |
| Use Cases & Ecosystem | 20% |
What each one covers in practice:
- MCP Fundamentals (16%): what MCP is, the problem it solves, the roles of host, client and server, and the JSON-RPC message model it's built on.
- Architecture & Components (14%): the primitives a server exposes, such as tools, resources and prompts, how capabilities are negotiated, and how transports work.
- Interactions & Execution (26%): the lifecycle of a session, how tool calls are made and results returned, sampling, notifications, and error handling. This is the largest domain and the most hands-on in spirit.
- Security & Governance (24%): trust boundaries, consent and permissions, authentication and token scope, sandboxing tool execution, logging, and the governance questions an organisation faces when it lets agents call tools.
- Use Cases & Ecosystem (20%): where MCP is used, how it fits with agent frameworks and LLM providers, and how to read and evaluate an MCP server manifest.
The weighting tells you where to study. Someone who has only built a simple MCP server will know Fundamentals and Architecture well, but may be thin on the security half of the exam.
Who should take the MCPA exam, and what experience does it assume?
The Linux Foundation lists five areas of recommended experience: JSON-RPC or similar message-based protocols, LLM API interaction, agentic AI concepts, basic security literacy, and the ability to interpret MCP server manifests.
There are no formal prerequisites. But the audience description points at three groups:
- Engineers building AI applications, agents and tool integrations
- Platform teams qualifying for emerging AI engineering and platform roles
- Governance and security professionals moving into AI governance roles
Angie Jones, Vice President of Developer Experience at the Agentic AI Foundation, framed the need this way at launch: "As organizations increasingly adopt agentic AI, they need developers who understand how those connections work and how to implement them responsibly, including the permissions and trust boundaries involved."
If you've never read an MCP server manifest or sent a JSON-RPC request, spend a week on those two things before booking.
Why does Security & Governance carry 24% of the exam?
Because MCP's rapid adoption outran its security practice. Security researchers have documented large numbers of exposed and vulnerable MCP deployments, and the exam weighting reflects that.
The Cloud Security Alliance's AI Safety Initiative reported in May 2026 roughly 200,000 vulnerable MCP instances across affected supply chains and more than 1,800 publicly accessible MCP servers lacking authentication in a mid-2025 scan, alongside confirmed high-severity CVEs on major development platforms. The NSA's May 2026 guidance on MCP identified uncontrolled automated tool invocation and insufficient screening of data passed between systems as primary risks.
That's the context for the exam's emphasis on trust boundaries, consent prompts, token scoping and sandboxing. Expect scenario questions that ask which control addresses which risk.
The CSA also offered a useful caution about what the credential proves. In its September 25, 2026 research note it called MCPA "a beginner-level, knowledge-based exam that cannot attest to how an organization has actually implemented sandboxing, token scoping, or audit logging in production." In other words, the certificate shows you understand the controls; it doesn't show your employer has deployed them.
Is the MCPA certification worth it in 2026?
For engineers and platform teams working with agents, yes, as an early signal in a field that has no other vendor-neutral credential. For security professionals, it's a useful baseline, not a substitute for implementation experience.
The adoption numbers behind the launch are hard to ignore:
- Monthly downloads across MCP's Tier 1 SDKs are approaching half a billion
- The TypeScript and Python SDKs have passed one billion downloads combined
- MCP tool calls from ChatGPT users reached 98 times their January level by August 2026
- Resend, an email API provider, passed one million MCP calls in a single month
Set against that, US$250 for a two-year credential that names a specific, fast-growing protocol on your CV is a modest cost. The honest limits: it's an associate-level, multiple-choice exam, it's new enough that hiring managers may not recognise it yet, and the CSA's point stands that it certifies knowledge rather than deployed practice.
How should you prepare for the MCPA exam?
Study the MCP specification version 2026-07-28 directly, build and inspect at least one server, and give the security domain the quarter of your time it deserves.
A practical plan for four to six weeks:
- Read the specification. The exam is built around the 2026-07-28 version. Read the sections on lifecycle, transports, tools, resources, prompts, sampling and authorization in full.
- Build a small MCP server and client. Use either official SDK (TypeScript or Python). Expose a tool and a resource, run a session, and watch the JSON-RPC messages. This covers Fundamentals, Architecture and most of Interactions & Execution.
- Read three real server manifests. The Linux Foundation lists "ability to interpret MCP server manifests" as expected experience. Practise identifying what a server exposes and what permissions it needs.
- Study the security material separately. Trust boundaries, consent, token scope, sandboxing and logging. The CSA's MCP security research and the NSA guidance are both relevant background for the Security & Governance domain.
- Map the ecosystem. Know how MCP fits with the major agent frameworks and LLM providers, and the common use cases, for the 20% Use Cases & Ecosystem domain.
- Do timed multiple-choice practice. Whether the exam is 90 or 120 minutes, scenario questions reward quick elimination of wrong controls and wrong message types.
Quick answers: MCPA FAQ
What does MCPA stand for?
Model Context Protocol Associate, a Linux Foundation and Agentic AI Foundation certification.
How much does the MCPA exam cost?
US$250 for the exam, or US$495 bundled with a THRIVE-ONE annual subscription.
How long is the MCPA exam?
The certification page lists 90 minutes; the launch press release said 120. Confirm at booking.
What format is the exam?
Online, proctored, multiple-choice.
How long is the certification valid?
Two years.
Is a retake included?
Yes, one retake, within the 12-month eligibility window.
Are there prerequisites?
No formal prerequisites. Recommended experience includes JSON-RPC, LLM APIs, agentic AI concepts, basic security literacy and reading MCP server manifests.
Which domains carry the most weight?
Interactions & Execution (26%) and Security & Governance (24%).
When did MCPA launch?
September 14, 2026.
Before you book
MCPA is the first credential that names the protocol most agent integrations now run on, and its weighting is a fair map of what matters: how MCP sessions actually execute, and how to keep them inside safe trust boundaries. Learn the spec, build a server, take the security domain seriously, and the exam is a reasonable four-to-six-week project.
For the full domain breakdown, practice questions and a structured preparation path, the Linux Foundation MCPA certification exam syllabus is a good place to start.
Exam details are from the Linux Foundation's MCPA certification page and the September 14, 2026 launch announcement; security figures are from the Cloud Security Alliance AI Safety Initiative. Confirm current details on the Linux Foundation site before booking.
Top comments (0)