Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions src/pages/provider-list.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ This list contains providers that have been tested with MCP Auth.
| [WSO2 Identity Server](https://wso2.com/identity-server/) | OpenID Connect | ✅ | ✅ | ✅ | ❌ |
| [Auth0](https://www.auth0.com) | OpenID Connect | ✅ | ✅ | ✅ | ⚠️[^4] |
| [Descope](https://www.descope.com) | OpenID Connect | ✅ | ✅ | ✅ | ⚠️[^4] |
| [LIME](https://lime.pics) | OAuth 2.1 | ✅ | ✅ | ⚠️[^5] | ❌ |

If you have tested MCP Auth with another provider, please feel free to submit a pull request to add it to the list.

Expand All @@ -27,6 +28,8 @@ If you have tested MCP Auth with another provider, please feel free to submit a

[^4]: Auth0 and Descope support multi-resource refresh tokens (MRRT) but not full RFC 8707. Resource indicator support is limited and not standards-based.

[^5]: `registration_endpoint` is advertised in metadata; `POST /register` returns 501. Agent authentication uses the `X-Agent-Token` header at `/authorize` (LIME-specific).

## Is Dynamic Client Registration required? {#is-dcr-required}

[Dynamic Client Registration](https://datatracker.ietf.org/doc/html/rfc7591) is not required for MCP servers and MCP Auth. In fact, you can choose the approach that best suits your needs:
Expand Down