Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zero-Touch OAuth for MCP

blog.modelcontextprotocol.io

Post reply on HN
Print view View original

31–40 of 124 posts

Re: Zero-Touch OAuth for MCP

#31

Post by mikestorrent »

dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Fantastic news. Is there any communication between you folks and the Microsoft Entra (Azure AD) team? Would love to know if we can expect this soon or if will take a while.

Re: Zero-Touch OAuth for MCP

#34

Post by brianjking »

dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Great work, thank you for doing this. Just so I understand, this isn't yet available yet, right? Still in SEP stage?

Re: Zero-Touch OAuth for MCP

#35

Post by daniban »

dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Anthropic is the only one with human readable tool names from the JUNE 2025 spec! So you guys are doing a great job and this is another example.

I'm just curious internally how you are seeing MCP adoption? It seems more and more connectors are created but are you seeing real adoption from users?

Re: Zero-Touch OAuth for MCP

#36

Post by zackify »

If only they would support the web and let you just issue a long running cookie....

I hacked the spec to pass through a cookie via the oauth handshake to do this without needing an oauth server.

Its really dumb they don't want to allow this.

If no cookie, open webpage.

If cookie set, close and persist.

I literally wrote an 80 page mini book on MCP yet it frustrates me to no end.

Re: Zero-Touch OAuth for MCP

#37

Post by dend »

zackify wrote: post #36

If only they would support the web and let you just issue a long running cookie.... I hacked the spec to pass through a cookie via the oauth handshake to do this without needing an oauth server. Its really dumb they don't want to allow this. If no cookie, open webpage. If cookie set, close and persist. I literally wrote an 80 page mini book on MCP yet it frustrates me to no end.

Hey - one of the lead maintainers of the MCP project here. There are a lot of scenarios where this simply won't scale (both from a usability and security standpoint). Cookies were made for the browser. MCP servers and clients often operate in environments where that is not a guarantee.

Re: Zero-Touch OAuth for MCP

#38

Post by dend »

daniban wrote: post #35
dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Anthropic is the only one with human readable tool names from the JUNE 2025 spec! So you guys are doing a great job and this is another example. I'm just curious internally how you are seeing MCP adoption? It seems more and more connectors are created but are you seeing real adoption from users?

You don't actually need to ask me for that - a lot of the data is very public, and we've been on a roll announcing MCP partnerships, and developer adoption keeps going up. There is always room to make the protocol better, but it certainly has a healthy foundation.

Re: Zero-Touch OAuth for MCP

#39

Post by dend »

brianjking wrote: post #34
dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Great work, thank you for doing this. Just so I understand, this isn't yet available yet, right? Still in SEP stage?

It is available! The feature is available in Claude, with Okta being the first IdP to support it (hopefully more coming soon) and with a bunch of MCP partners launching with us today.

The underlying extension has been in the MCP protocol for some time and is now officially stable.

Re: Zero-Touch OAuth for MCP

#40

Post by dend »

mikestorrent wrote: post #31
dend wrote: post #15

Hey folks - I am one of the folks at Anthropic that helped deliver this in partnership with Okta and a handful of MCP partners. We're very excited about this taking shape in Claude (in addition to the MCP spec, of course, where EMA is now a stable extension) and are looking to expand adoption to other identity providers and clients as well. If you have any feedback, feel free to drop it in here! Always happy to hear…

Fantastic news. Is there any communication between you folks and the Microsoft Entra (Azure AD) team? Would love to know if we can expect this soon or if will take a while.

We are in touch with the Microsoft Entra ID folks to see how we can better integrate EMA in their stack!
Post reply on HN