MCP's auth spec is lacking and Auth0 isn't helping(github.com)

3 pointsby Norcim13311 miesięcy temu3 comments

MCP's auth spec is lacking and Auth0 isn't helping

https://github.com/orgs/modelcontextprotocol/discussions/536

3 comments

PaulHoule11 miesięcy temu

MCP makes the old WS-stack from Microsoft look well designed.

Norcim13311 miesięcy temu

Seems like it isn't all the protocol? A lot of it is the and the current tools. If you have a hardcore dev who knows auth they can implement to spec and be safe/simple-ish.

mindcrime11 miesięcy temu

Actual title "The Auth Section Conflates Two Auth Flows".