diff --git a/src/pages/provider-list.mdx b/src/pages/provider-list.mdx index 248e1a0..6f89c87 100644 --- a/src/pages/provider-list.mdx +++ b/src/pages/provider-list.mdx @@ -16,6 +16,7 @@ This list contains providers that have been tested with MCP Auth. | [WSO2 Identity Server](https://wso2.com/identity-server/) | OpenID Connect | ✅ | ✅ | ✅ | ❌ | | [Auth0](https://www.auth0.com) | OpenID Connect | ✅ | ✅ | ✅ | ⚠️[^4] | | [Descope](https://www.descope.com) | OpenID Connect | ✅ | ✅ | ✅ | ⚠️[^4] | +| [LIME](https://lime.pics) | OAuth 2.1 | ✅ | ✅ | ⚠️[^5] | ❌ | If you have tested MCP Auth with another provider, please feel free to submit a pull request to add it to the list. @@ -27,6 +28,8 @@ If you have tested MCP Auth with another provider, please feel free to submit a [^4]: Auth0 and Descope support multi-resource refresh tokens (MRRT) but not full RFC 8707. Resource indicator support is limited and not standards-based. +[^5]: `registration_endpoint` is advertised in metadata; `POST /register` returns 501. Agent authentication uses the `X-Agent-Token` header at `/authorize` (LIME-specific). + ## Is Dynamic Client Registration required? {#is-dcr-required} [Dynamic Client Registration](https://datatracker.ietf.org/doc/html/rfc7591) is not required for MCP servers and MCP Auth. In fact, you can choose the approach that best suits your needs: