Everything with this tag, newest first, across all four kinds.
Given nothing but a URL and client credentials, the v1.53.0 MCPClient handles OAuth (client_credentials) discovery, token acquisition, and reuse within an instance. The requested scopes, however, are not what you pass but the full set the server advertises. Verified locally with a self-hosted authorization server.
Notes on COAZ-MCP, the working group draft that maps MCP messages onto AuthZEN decision requests — the problem it tries to solve, how default and declared mappings work, and where it stands today.
Pairing FastMCP's OIDCProxy with Amazon Cognito to compare three ways of authenticating an MCP client — CIMD, dynamic client registration, and pre-registered credentials — against one User Pool.
What it takes to make three-legged OAuth work when tool calls are routed through AgentCore Gateway.