The accepted MACs are CMAC (NIST SP 800-38B), to be used for at most 2 to the power 48 messages per key, only where no party can learn the enciphering of the all-zero block under the underlying cipher, and with tags of at least 96 bits under protected keys; and HMAC (FIPS 198-1) with the SHA-2 and SHA-3 functions of section 2.3, likewise with tags of at least 96 bits and protected authentication keys.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.