diff --git a/ibexa/headless/6.0/config/packages/security.yaml b/ibexa/headless/6.0/config/packages/security.yaml
index 2126bc5d..c4276bcf 100644
--- a/ibexa/headless/6.0/config/packages/security.yaml
+++ b/ibexa/headless/6.0/config/packages/security.yaml
@@ -75,7 +75,7 @@ security:
         #        - 'Ibexa\Cdp\Security\CdpRequestAuthenticator'
         #    stateless: true
 
-        # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST and/or GraphQL
+        # Uncomment the rules below to enable JSON Web Token (JWT) authentication for REST, and/or GraphQL, and/or MCP
         #ibexa_jwt_rest:
         #    request_matcher: Ibexa\Rest\Security\JWTTokenCreationRESTRequestMatcher
         #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
@@ -101,6 +101,13 @@ security:
         #    stateless: true
         #    jwt: ~
 
+        #ibexa_jwt_mcp:
+        #    request_matcher: Ibexa\Mcp\Security\McpRequestMatcher
+        #    user_checker: Ibexa\Core\MVC\Symfony\Security\UserChecker
+        #    provider: ibexa
+        #    stateless: true
+        #    jwt: ~
+
         # Uncomment ibexa_oauth2_connect, ibexa_oauth2_front rules and comment ibexa_front firewall
         # to enable OAuth2 authentication