DCRM support?

[mistereechapman]

Hello,

I was wondering if DCRM might be on the roadmap at some point in the future.

Stumbled upon tooling such as vscode now using it with it's MCP oauth handshaking. Was curious if it's something duende would be taking on board or if I am better off giving it a crack myself

[wcabus]

IdentityServer already supports Dynamic Client Registration. You may be particularly interested in the section on calling the registration endpoint.

To fully support MCP authorization, we're most likely missing support for RFC 8414 - OAuth 2.0 Authorization Server Metadata. You could add custom middleware to forward the contents of the existing /.well-known/openid-configuration endpoint when someone requests /.well-known/oauth-authorization-server, and extend the existing discovery metadata with the DCR endpoint.

We're looking into this, but currently have no commitment to implement MCP support for the next release of IdentityServer.

Could you elaborate more on your thoughts? What are you missing from IdentityServer to make this work? Can you share the use case of what you're trying to achieve?

[mistereechapman]

I have already implemented DCR, I was asking more about DCRM.

I have had success in modifying Idsrv to work with MCP.

[wcabus]

If you can share a sample, that would be awesome! Others may benefit from this 🙂

[narbit]

We've also successfully utilized existing Duende DCR to work with the VSCode for the purpose of gating MCP servers. Almost everything came out of the Duende box with several small modifications to default DCR client properties which was done by extending DynamicClientRegistrationRequestProcessor. For example, for auth code + pkce, DCR creates a client with a secret and sets RequireClientSecret to true, while VSCode doesn't send one, at least in the version we tested with about a week ago. We also customized the DiscoveryResponseGenerator to expose the registration endpoint. Overall, things went very smooth when applying existing Duende DCR to map to MCP AuthZ spec and VSCode reqs.

[maartenba]

IdentityServer 7.4 comes with a number of improvements around DCR - https://duendesoftware.com/blog/20251202-the-secure-gateway-to-ai-duende-identityserver-and-dynamic-client-registration-for-mcp