Discloses the device's ability to authenticate communication partners: whether it provides or supports node authentication so that sender and recipient are known to each other and authorised to receive the information (for example web APIs, SMTP, SNMP) (NAUT-1); whether network access control is supported, such as an internal firewall or a network connection allow-list (NAUT-2), with the firewall rules written down and open to review (2.1); and whether certificate-based network connection authentication is used, with how certificates are managed (NAUT-3).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.