@@ -135,26 +135,26 @@ remain unchanged.
135
135
136
136
### 2.3 Dynamic Client Registration
137
137
138
- MCP clients and servers ** SHOULD** support the [ OAuth 2.0 Dynamic Client
139
- Registration Protocol] ( https://datatracker.ietf.org/doc/html/rfc7591 ) to allow
140
- MCP clients to obtain OAuth client IDs without user interaction. This provides a
141
- standardized way for clients to automatically register with new servers, which
142
- is crucial for MCP because:
138
+ MCP clients and servers ** SHOULD** support the
139
+ [ OAuth 2.0 Dynamic Client Registration Protocol] ( https://datatracker.ietf.org/doc/html/rfc7591 )
140
+ to allow MCP clients to obtain OAuth client IDs without user interaction. This provides a
141
+ standardized way for clients to automatically register with new servers, which is crucial
142
+ for MCP because:
143
143
144
144
- Clients cannot know all possible servers in advance
145
145
- Manual registration would create friction for users
146
146
- It enables seamless connection to new servers
147
147
- Servers can implement their own registration policies
148
148
149
- Any MCP servers that _ do not_ support Dynamic Client Registration need to
150
- provide alternative ways to obtain a client ID (and, if applicable, client
151
- secret). For one of these servers, MCP clients will have to either:
149
+ Any MCP servers that _ do not_ support Dynamic Client Registration need to provide
150
+ alternative ways to obtain a client ID (and, if applicable, client secret). For one of
151
+ these servers, MCP clients will have to either:
152
152
153
- 1 . Hardcode a client ID (and, if applicable, client secret) specifically for
154
- that MCP server, or
155
- 2 . Present a UI to users that allows them to enter these details, after
156
- registering an OAuth client themselves (e.g., through a configuration interface
157
- hosted by the server).
153
+ 1 . Hardcode a client ID (and, if applicable, client secret) specifically for that MCP
154
+ server, or
155
+ 2 . Present a UI to users that allows them to enter these details, after registering an
156
+ OAuth client themselves (e.g., through a configuration interface hosted by the
157
+ server).
158
158
159
159
### 2.4 Authorization Flow Steps
160
160
0 commit comments