Repository navigation
SEP-1046: Support OAuth client credentials flow in authorization #772
Description
On hold until modelcontextprotocol/modelcontextprotocol#1047 is merged
{{ message }}
On hold until modelcontextprotocol/modelcontextprotocol#1047 is merged
Activity
[-]Implement SEP-1046: Support OAuth client credentials flow in authorization[/-][+]SEP-1046: Support OAuth client credentials flow in authorization[/+]jeffhandley commentedon Nov 18, 2025
SEP-1046 and SEP-1502: Support client credentials flow via new MCP Extension mechanism (modelcontextprotocol/modelcontextprotocol#1047) was closed in favor of SEP-1046 and SEP-1502: Support client credentials flow as an auth extension (modelcontextprotocol/ext-auth#3), which merged.
halter73 commentedon Nov 21, 2025
As with Enterprise-Managed Authorization, Client Credentials are an optional extension. Given that it's optional, and there hasn't been a customer ask for this yet, I'm removing it from the 2025-11-25 Spec Compliance milestone.
jeffhandley commentedon Jul 31, 2026
Conformance coverage exists, but the app-facing client_credentials flow is still not first-class in the public SDK API/docs. Keeping this open at P3 for now.