Back to home

Use case

Secure MCP servers with auth and access control
Context

Add OAuth-based authentication and authorization to your MCP servers in just a few lines of code. The Agentic Identity Hub supports modern MCP auth out of the box—including OAuth 2.1, Dynamic Client Registration (DCR), and Client ID Metadata Documents (CIMD)—so you’re ready for emerging agent standards. Customize the full user authentication and consent experience without changing your MCP server code.

How it works
  1. Configure your MCP server in the Agentic Identity Hub.
  2. Copy over the .well-known discovery URL to your MCP server’s code or follow our code samples in the console.
  3. When an unauthenticated client attempts to connect to your MCP server, it will be redirected to your configured Authorization Server within Descope.
Useful links