Visitar URL original
SEP-2352: Clarify authorization server binding and migration by dend · Pull Request #2352 · modelcontextprotocol/modelcontextprotocol · GitHub
Skip to content

SEP-2352: Clarify authorization server binding and migration - #2352

Merged
mcp-commander[bot] merged 13 commits into
mainfrom
den/as
Mar 28, 2026
Merged

SEP-2352: Clarify authorization server binding and migration#2352
mcp-commander[bot] merged 13 commits into
mainfrom
den/as

Conversation

@dend

@dend dend commented Mar 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Test plan

  • npx prettier --check passes
  • npm run check:docs:js-comments passes
  • Review rendered docs for correct formatting

🤖 Generated with Claude Code

@dend
dend requested a review from a team as a code owner March 4, 2026 22:42
@dend @claude
docs: clarify authorization server binding and multi-AS behavior
dcbfb63 
Add guidance for clients on binding persisted client credentials to
specific authorization servers and handling AS changes. Clarifies
multi-AS behavior when multiple servers are listed in
authorization_servers.

Closes #1349

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@dend dend changed the title docs: clarify authorization server binding and migration SEP-2352: Clarify authorization server binding and migration Mar 4, 2026
@dend dend self-assigned this Mar 4, 2026
@dend dend added auth security SEP draft SEP proposal with a sponsor. labels Mar 4, 2026
@dend dend moved this to In Review in SEP Review Pipeline Mar 4, 2026
@dend dend linked an issue Mar 4, 2026 that may be closed by this pull request
The authorization spec is unclear when multiple Authorization servers are involved #1349
Closed
pcarleton
pcarleton reviewed Mar 5, 2026
View reviewed changes

@pcarleton pcarleton left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a good change. Both typescript and python will need to adjustments.

Should be straightforward to conformance test as well, and key it on DCR support.

KevinLuo2000
KevinLuo2000 reviewed Mar 5, 2026
View reviewed changes
Comment thread docs/specification/draft/basic/authorization.mdx Resolved
localden and others added 2 commits March 5, 2026 08:15
@localden @KevinLuo2000
Update docs/specification/draft/basic/authorization.mdx
a4e271a 
Co-authored-by: Kaixuan Luo <30545735+KevinLuo2000@users.noreply.github.com>
@localden @KevinLuo2000
Update docs/specification/draft/basic/authorization.mdx
6e1657b 
Co-authored-by: Kaixuan Luo <30545735+KevinLuo2000@users.noreply.github.com>
@dend @claude
Trigger CI
25aed5a 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@joshrotenberg joshrotenberg mentioned this pull request Mar 5, 2026
Closed
@dend dend mentioned this pull request Mar 5, 2026
Merged
3 tasks done
max-stytch
max-stytch reviewed Mar 6, 2026
View reviewed changes
Comment thread docs/specification/draft/basic/authorization.mdx Resolved
@localden @max-stytch
Update docs/specification/draft/basic/authorization.mdx
d133654 
Co-authored-by: Max Gerber <89937743+max-stytch@users.noreply.github.com>
wdawson
wdawson reviewed Mar 6, 2026
View reviewed changes
Comment thread docs/specification/draft/basic/authorization.mdx Resolved
Comment thread docs/specification/draft/basic/authorization.mdx Resolved
Comment thread docs/specification/draft/basic/authorization.mdx Resolved
dend and others added 3 commits March 6, 2026 14:29
@dend @wdawson
Update docs/specification/draft/basic/authorization.mdx
a0c163f 
Co-authored-by: Wils Dawson <wils.dawson@gmail.com>
@dend @wdawson
Update docs/specification/draft/basic/authorization.mdx
c6813f3 
Co-authored-by: Wils Dawson <wils.dawson@gmail.com>
@dend @wdawson
Update docs/specification/draft/basic/authorization.mdx
aa60a6c 
Co-authored-by: Wils Dawson <wils.dawson@gmail.com>
This was referenced Nov 2, 2026
Open
Open
Copilot AI mentioned this pull request Nov 4, 2026
Merged
4 of 9 tasks
This was referenced Nov 5, 2026
Closed
Closed
Open
Merged
Open
Merged
Open
Closed
Open
Open
Closed
Open
Closed
Closed
Open
Open
Open
Closed
Open
Open
Merged
Closed
Open
This was referenced Nov 12, 2026
Closed
Open
Open
Open

This branch was successfully deployed

1 active deployment
staging - docs — 865c40f1 Deployed Mar 25, 2026 by mintlify[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pcarleton pcarleton pcarleton left review comments
@nbarbettini nbarbettini nbarbettini left review comments
@localden localden localden left review comments
@dsp-ant dsp-ant dsp-ant left review comments
@SamMorrowDrums SamMorrowDrums SamMorrowDrums approved these changes
@mcp-commander mcp-commander[bot] mcp-commander[bot] approved these changes
+3 more reviewers
@wdawson wdawson wdawson left review comments
@KevinLuo2000 KevinLuo2000 KevinLuo2000 left review comments
@max-stytch max-stytch max-stytch left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

@localden localden

Labels

auth final SEP finalized. security SEP

Projects

2026-07-28 Spec Implementation
Status: Done
SEP Review Pipeline
Status: Final

Milestone

2026-07-28-RC

Development

Successfully merging this pull request may close these issues.

The authorization spec is unclear when multiple Authorization servers are involved

10 participants

@dend @localden @guglielmo-san @wdawson @pcarleton @SamMorrowDrums @nbarbettini @KevinLuo2000 @max-stytch @dsp-ant