This article is part of our MCP Guide: what the Model Context Protocol is, how to use it safely, and how to choose servers, tools and help. Want a second opinion on your setup? Request a free MCP readiness review.
The MCPA (Model Context Protocol Associate) is the first official certification for MCP. It is run by the Agentic AI Foundation (AAIF) and Linux Foundation Education. It tests whether someone understands how MCP works, how its parts talk to each other, and how to use it safely.
The Linux Foundation announced the MCPA on 14 September 2026. It is an online, proctored, multiple-choice exam aligned to the 2026-07-28 version of the MCP specification.
If you are hiring someone to build or manage MCP connections, the MCPA is a useful signal. It is not proof that a person can ship a secure, production-ready MCP server. This guide explains the difference.
Key Takeaways
- The MCPA is a vendor-neutral, beginner-level MCP certification from the AAIF and Linux Foundation, launched 14 September 2026.
- The exam costs $250 on the Linux Foundation training site, includes one retake, and the credential is valid for two years.
- Security and governance make up 24% of the exam, second only to interactions and execution at 26%.
- There are no formal prerequisites, so the MCPA shows knowledge of the protocol, not years of build experience.
- When hiring, treat the MCPA as a baseline and still ask for shipped work, security practices and references.
Who runs the MCPA?
MCP was created at Anthropic and donated to the Agentic AI Foundation in December 2025. The AAIF is a directed fund under the Linux Foundation, co-founded by Anthropic, Block and OpenAI (Anthropic announcement). For the full background, see who owns MCP.
The AAIF calls the MCPA "the first official certification dedicated to MCP." It says an advisory council from Anthropic, Google, AWS, Microsoft, Block, GitHub, Hugging Face and others helped shape the exam (AAIF blog).
That vendor-neutral backing matters. The credential is not tied to one AI company's product.
Exam format, price and rules
Here are the details as listed on the official MCPA certification page, checked on 28 October 2026.
| Detail | What the official page says |
|---|---|
| Full name | Model Context Protocol Associate (MCPA) |
| Format | Online, proctored, multiple-choice |
| Price | $250 (exam only); $495 bundled with a THRIVE-ONE annual subscription |
| Retake | One retake included |
| Eligibility window | 12 months to take the exam |
| Validity | 2 years |
| Prerequisites | None required |
| Level | Beginner |
| Spec version | Aligned to MCP specification 2026-07-28 |
A note on exam length. Official sources disagree. The Linux Foundation's launch press release and the AAIF blog both say 120 minutes. The certification page and the Linux Foundation training blog say 90 minutes. Check the exam page when you book, because that is where the current rules live.
The press release also says attendees of AGNTCon + MCPCon events got a 20% discount. Prices and promotions change, so confirm on the official page before you pay.
What the exam covers: the five domains
The MCPA has five weighted domains. The weights and topics below come from the official certification page and match the Linux Foundation press release.
| Domain | Weight | Topics listed |
|---|---|---|
| Interactions & Execution | 26% | Interaction patterns and response handling, error handling, tool invocation lifecycle, protocol primitives |
| Security & Governance | 24% | Trust boundaries, permissions and consent, risk and safety controls, auditability and observability |
| Use Cases & Ecosystem | 20% | Roles and adoption, operational use cases, ecosystem and portability |
| MCP Fundamentals | 16% | Purpose and scope, core concepts, interoperability and value |
| Architecture & Components | 14% | Schemas and structured data, hosts, clients and servers, model interaction flow |
Two things stand out. Nearly a quarter of the exam is security and governance. And half the exam (interactions plus security) is about how MCP behaves at runtime, not just definitions.
If you want a primer on the terms the exam uses (hosts, clients, servers, primitives), start with how MCP works and the MCP glossary.
Recommended background
The official page lists no required prerequisites. It does recommend that candidates have:
- Basic knowledge of JSON-RPC or similar message-based protocols
- Experience with LLM APIs (for example OpenAI, Anthropic, or local models through Ollama)
- An understanding of agentic AI ideas such as tool use
- Basic security literacy: API keys, OAuth 2.1, token handling and authentication headers
- The ability to read MCP server manifests and capability definitions
The page names target roles in AI engineering, platform engineering, and AI governance and security.
What the MCPA proves (and what it doesn't)
Here is a fair way to read the credential when it shows up on a resume or a vendor's website.
What it shows:
- The person passed a proctored exam on the current MCP specification.
- They know the vocabulary and architecture: hosts, clients, servers, tools, resources and prompts.
- They have studied MCP's trust boundaries, consent and auditing concepts.
- Their knowledge is recent. The exam is tied to the 2026-07-28 spec, and the credential lasts two years.
What it doesn't show:
- That they have built and shipped an MCP server people use. The MCPA is beginner-level with no experience requirement.
- That they can run a production deployment: hosting, monitoring, rate limits and incident response.
- That they know your industry's rules, such as handling health, payment or financial data.
- That the code they write is secure. A multiple-choice exam can test knowledge, not code quality.
In short, the MCPA is a good floor, not a ceiling.
How to use the MCPA when you hire
Use the credential to shortlist, then test for the things it can't prove.
- Ask for shipped work. Request a link to an MCP server they built, or a demo, and the client it runs in.
- Ask how they handle sign-in. Good answers mention OAuth, narrow scopes and never passing tokens straight through to other services.
- Ask about approvals and logging. They should explain how risky tools get human approval and how calls are logged.
- Ask which spec version they target. As of October 2026, the current version is 2026-07-28.
- Check references. Speak to a past client about support after launch.
Our guide on how to hire an MCP developer has a full question list and red flags. If you're comparing an agency with a freelancer, see MCP agency vs freelancer vs in-house.
How to verify someone's MCPA
Ask the candidate for proof of certification, such as their certificate or a verification link, and check that the name and date match. If anything looks off, contact Linux Foundation Education through the certification page.
Next step
Ready to bring someone on? Read how to hire an MCP developer for interview questions and red flags. If you need a team to build or review an MCP server, see our MCP development service.
Frequently asked questions
What does MCPA stand for?
MCPA stands for Model Context Protocol Associate. It is the official MCP certification from the Agentic AI Foundation and Linux Foundation Education, launched 14 September 2026.
How much does the MCPA exam cost?
The official certification page lists $250 for the exam alone, or $495 bundled with a THRIVE-ONE annual subscription. One retake is included. Check the page before buying, as prices and promotions change.
How long is the MCPA exam?
Official sources differ. The launch press release says 120 minutes, while the certification page says 90 minutes. Use the time shown on the exam page when you register.
Does the MCPA expire?
Yes. The certification page says the credential is valid for two years. That makes sense, because the MCP specification is updated over time.
Is the MCPA worth it for developers?
It is a quick way to show employers and clients you know the current spec, especially its security model. It works best alongside a portfolio of real MCP projects.
Should I only hire MCPA-certified developers?
No. The MCPA is new and beginner-level, so many experienced MCP builders may not have it yet. Use it as one signal, together with shipped work and references.
