Set up sign-in for managed MCP servers changedthird-party/claude-desktop/mcp-sign-in
Nearest release: v2.1.321, published an hour after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 9 Nov 2026 17:06 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 9 Nov 2026 17:07 UTC.
Upstream edited
Recorded here
Lines+1added
Lines−0removed
From line
89
where the diff opens
First seen
16 Sep 2026
this site's first read of the page
Recorded edits8to this page, all time
The whole hunk
from line 89, old and new numbered
/
from line 89
8989
9090| What the user sees or `main.log` records | Cause | Fix |
9191| - | - | - |
92| "Connection to server failed. You can try again." with no sign-in window, and `main.log` shows an HTML block page from your network, starting at the `[error]` line that contains the server's name and the word `failed` | A firewall or secure web gateway blocked the request to the MCP server before sign-in started. Such equipment can classify the connection as Model Context Protocol (MCP) traffic and block it even when the server's host is allowed | Send the block page to your network team and ask them to allow MCP traffic to the server's host. Then have the user click **Connect** again |
9293| "Couldn't connect to \{server} because it doesn't support automatic client registration" (Claude Desktop 2.110.0 or later), or `main.log` records that the authorization server does not support dynamic client registration | **OAuth** is **Auto-register** but the identity provider requires a client that you register | Register a public client with redirect URI `http://127.0.0.1:53280/callback`, set **OAuth** to **Bring your own client**, and fill in **Client ID** |
9394| The browser step succeeds, then the connection fails and `main.log` records the token endpoint's error, for example `client_secret is missing` | The entry has a **Client ID** but the identity provider also requires the secret | Add the secret and **Authorization server** as described under [Where the client secret goes](#where-the-client-secret-goes) |
9495| `main.log` names a rejected referrer host during sign-in | The identity provider completes sign-in from a host other than the one in its authorization URL | Add that hostname to **Additional redirect referrer hosts** |
No line in this hunk matches that.