Skip to main content

Access requirements

Pre-RequisitesStatusComment
MCP-compatible serverServer must support OAuth 2.0 with dynamic discovery (RFC 8414, RFC 9728).
OAuth endpointsServer must expose /.well-known/oauth-authorization-server endpoint.
PKCE supportRequired for secure public client authentication.

Setup guide

No setup guide yet.
Need help getting started? Get help in the community.
Contribute improvements to the setup guide by editing this page
Github’s remote MCP doesn’t follow the specification exactly so won’t work using those provider
Contribute useful links by editing this page

API gotchas

  • Dynamic Discovery: MCP Generic automatically discovers OAuth endpoints from the MCP server’s /.well-known/oauth-authorization-server endpoint.
  • No Pre-configuration: No need to pre-configure OAuth client credentials. Clients are registered dynamically during the authorization flow.
  • PKCE Required: All MCP Generic flows use PKCE for security. Client secrets are not used.
  • Server URL Format: Always provide the full MCP server URL (e.g., https://api.example.com/mcp, not api.example.com).
  • Automatic Scopes: OAuth scopes are automatically discovered from MCP server metadata.
Contribute API gotchas by editing this page
I