Enterprise-Managed Authorization changedextensions/auth/enterprise-managed-authorization
Upstream edited this page at 28 Jul 2026 15:42 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 20 Oct 2026 20:07 UTC.
Upstream edited
Recorded here
Lines+19added
Lines−21removed
From line
4
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits2to this page, all time
The whole hunk
from line 4, old and new numbered
/
from line 4
44
55The Enterprise-Managed Authorization extension (`io.modelcontextprotocol/enterprise-managed-authorization`) enables organizations to control MCP server access centrally through their existing identity provider (IdP). Instead of each employee authorizing each MCP server individually, the organization's IT or security team manages access policies in one place.
66
7<Card title="Specification" icon="file-lines" href="https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/enterprise-managed-authorization.mdx">
8 Full technical specification for the Enterprise-Managed Authorization
9 extension.
10</Card>
7> **[Specification](https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/enterprise-managed-authorization.mdx)**
8>
9> Full technical specification for the Enterprise-Managed Authorization
10> extension.
1111
1212## What it is
1313
from line 131
131131
132132## Client support
133133
134<Note>
135 Support for this extension varies by client. Extensions are opt-in and never active by default.
136</Note>
134> [!NOTE]
135>
136> Support for this extension varies by client. Extensions are opt-in and never active by default.
137137
138138Check the [client matrix](/extensions/client-matrix) for current implementation status across MCP clients. Enterprise-Managed Authorization typically requires client-level support from the organization's IT team in addition to the MCP client application.
139139
140140## Related resources
141141
142<CardGroup cols={2}>
143 <Card title="ext-auth repository" icon="github" href="https://github.com/modelcontextprotocol/ext-auth">
144 Source code and reference implementations
145 </Card>
142> **[ext-auth repository](https://github.com/modelcontextprotocol/ext-auth)**
143>
144> Source code and reference implementations
146145
147 <Card title="Full specification" icon="file-lines" href="https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/enterprise-managed-authorization.mdx">
148 Technical specification with normative requirements
149 </Card>
146> **[Full specification](https://github.com/modelcontextprotocol/ext-auth/blob/main/specification/stable/enterprise-managed-authorization.mdx)**
147>
148> Technical specification with normative requirements
150149
151 <Card title="SEP-990" icon="file-lines" href="/seps/990-enable-enterprise-idp-policy-controls-during-mcp-o">
152 Original proposal: Enable Enterprise IdP Policy Controls
153 </Card>
150> **[SEP-990](/seps/990-enable-enterprise-idp-policy-controls-during-mcp-o)**
151>
152> Original proposal: Enable Enterprise IdP Policy Controls
154153
155 <Card title="MCP Authorization" icon="lock" href="/specification/latest/basic/authorization">
156 Core MCP authorization specification
157 </Card>
158</CardGroup>
154> **[MCP Authorization](/specification/latest/basic/authorization)**
155>
156> Core MCP authorization specification
159157
No line in this hunk matches that.