modelcontextprotocol/ext-auth
Watch
1
0
Fork
You've already forked ext-auth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Mirror of https://github.com/modelcontextprotocol/ext-auth — Extensions to authorization
25 commits 1 branch 0 tags 77 KiB
  • MDX 100%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Paul Carleton 67ffc6c02d
 Align Enterprise-Managed Authorization with id-jag-04 
Reduce duplication by referencing draft-ietf-oauth-identity-assertion-authz-grant-04
for roles, token exchange parameters, ID-JAG claims, and processing rules,
keeping only MCP-specific constraints inline.

- Adopt 'Resource Authorization Server' terminology from id-jag §2
- Replace parameter/claim tables with section references plus MCP deltas
- Keep `resource` REQUIRED in this profile (id-jag-04 made it optional)
- Drop the restriction on `actor_token` (removed upstream in -03)
- Replace multi-tenant implementation notes with reference to id-jag §6
- Reference id-jag §5 for cross-domain client_id handling
- Add Discovery section referencing `authorization_grant_profiles_supported`
2026-06-17 19:52:45 +01:00
.github Add markdown formatting and link checking workflow 2025-10-14 15:38:18 -07:00
specification/draft Align Enterprise-Managed Authorization with id-jag-04 2026-06-17 19:52:45 +01:00
.gitignore Add npm configuration with prettier and link checking 2025-10-14 15:34:29 -07:00
LICENSE Initial commit 2025-10-01 12:08:21 +01:00
MAINTAINERS.md Add npm configuration with prettier and link checking 2025-10-14 15:34:29 -07:00
package-lock.json Add npm configuration with prettier and link checking 2025-10-14 15:34:29 -07:00
package.json Add npm configuration with prettier and link checking 2025-10-14 15:34:29 -07:00
README.md fix list syntax 2025-10-24 09:32:16 -07:00
SECURITY.md Add SECURITY.md with GitHub Security Advisories guidance 2026-02-18 20:55:00 +00:00

README.md

MCP Authorization Extensions

The Model Context Protocol (MCP) specification is defined in the main specification repository. This repository contains extensions to the core protocol that define additional authorization mechanisms.

These extensions are:

  • Optional - Implementations can choose to adopt these extensions
  • Additive - Extensions do not modify or break core protocol functionality; they add new capabilities while preserving core protocol behavior
  • Composable - Extensions are modular and designed to work together without conflicts, allowing implementations to adopt multiple extensions simultaneously
  • Versioned independently - Extensions follow the core MCP versioning cycle but may adopt independent versioning as needed

Extensions

Governance

This repository follows the Model Context Protocol Governance process, with a dedicated set of maintainers for authorization extensions. See MAINTAINERS.md for the list of maintainers specific to this repository.

All decisions regarding authorization extensions follow the same governance model as the core specification, including:

  • Specification Enhancement Proposals (SEPs)
  • Community discussion and consensus building
  • Maintainer review and approval
  • Transparent decision-making

Policies

This repository follows the Model Context Protocol project policies: