Live data from Hacker News

MCP Auth Explained: Every Method, Direct and Through a Proxy

blog.dwornikowski.com

1–8 of 8 posts

Re: MCP Auth Explained: Every Method, Direct and Through a Proxy

#2
Enjoying this so far.

> The MCP authorization spec is written entirely around user-delegated flows and does not define a machine-to-machine grant at all.

is slightly wrong. There's a blessed extension: https://modelcontextprotocol.io/extensions/auth/oauth-client...

Re: MCP Auth Explained: Every Method, Direct and Through a Proxy

#3
post #2

Enjoying this so far. > The MCP authorization spec is written entirely around user-delegated flows and does not define a machine-to-machine grant at all. is slightly wrong. There's a blessed extension: https://modelcontextprotocol.io/extensions/auth/oauth-client...

Yeah, other than that one thing, this was a great intro to MCP auth.

Re: MCP Auth Explained: Every Method, Direct and Through a Proxy

#6
post #2

Enjoying this so far. > The MCP authorization spec is written entirely around user-delegated flows and does not define a machine-to-machine grant at all. is slightly wrong. There's a blessed extension: https://modelcontextprotocol.io/extensions/auth/oauth-client...

Thanks for this - I will update the post.

Re: MCP Auth Explained: Every Method, Direct and Through a Proxy

#7
post #3
post #2

Enjoying this so far. > The MCP authorization spec is written entirely around user-delegated flows and does not define a machine-to-machine grant at all. is slightly wrong. There's a blessed extension: https://modelcontextprotocol.io/extensions/auth/oauth-client...

Yeah, other than that one thing, this was a great intro to MCP auth.

Thanks !