Oauth2 Flow conflict with MCPToolSet discovery of tools

[davidkl97]

Hey folks, I have a problem of authorization access to OAuth2 based remote MCP server.
MCPToolSet discover new tools via get_tools which creates a session. As the session is not authorized and exchanged for access token, it fails to retrieve the tools.

Looks like the reactive tool auth request flow in this case doesn't fit as its scoped to specific tool while here its more of discovery of tools which should be invoked in earlier lifecycles.

Would like to hear your opinions and suggestions how to tackle this.

Related work: #2061

[enxilium]

As an aside, since it seems we are working on similar things, do you know if loading the MCP servers normally is computationally heavy? Is it possible to load them beforehand so when the session with the agent initializes, it's as fast as possible?

[davidkl97]

hey @seanzhou1023 , do you have suggestion how to approach this?

[blcvt]

Working on the same thing. My issue so far is that MCPTools should be able to handle the auth discovery endpoints and trigger oauth upon receiving a 401 error but instead just crashes.