118 pages for issuer.

Enterprise-Managed Authorization Charter Model Context Protocol · in the page community/interest-groups/enterprise-managed-authorization …an EMA conformance suite should make (ID-JAG validation, audience and issuer checks, claim mapping, account linking, error handling) and contributing scenarios to the [conformance](https://github.com/… Understanding Authorization in MCP Model Context Protocol · in the page docs/2024-11-05/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-03-26/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-06-18/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Understanding Authorization in MCP Model Context Protocol · in the page docs/2025-11-25/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Understanding Authorization in MCP Model Context Protocol · in the page docs/2026-07-28/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Understanding Authorization in MCP Model Context Protocol · in the page docs/draft/tutorials/security/authorization …needs to complete the authorization flow. ```json theme={null} { "issuer": "https://auth.your-server.com", "authorization_endpoint": "https://auth.your-server.com/authorize", "token_endpoint":… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …es against the IdP's JWKS endpoint and checking the token's audience, issuer, and expiration. 2. **Map IdP claims to permissions** — ID-JAG tokens carry claims (scope and resource information) that y… OAuth Client Credentials Model Context Protocol · in the page extensions/auth/oauth-client-credentials …) ``` The JWT assertion typically includes: * `iss`: Client ID (the issuer) * `sub`: Client ID (subject being authenticated) * `aud`: Authorization server token endpoint URL * `exp`: Expiration time… Specification Enhancement Proposals (SEPs) Model Context Protocol · in the page seps/index …us | Final | Process | 2026-03-27 | | [SEP-2468](/seps/2468-recommend-issuer-claim-for-auth.md) | Recommend Issuer (iss) Parameter in MCP Auth Responses | Final | Standards Track | 2026-03-25 | | [SEP… Authorization Model Context Protocol · in the page specification/2025-11-25/basic/authorization …on. ### Authorization Server Metadata Discovery To handle different issuer URL formats and ensure interoperability with both OAuth 2.0 Authorization Server Metadata and OpenID Connect Discovery 1.0… Authorization Server Discovery Model Context Protocol · in the page specification/2026-07-28/basic/authorization/authorization-server-discovery …e an application-specific well-known URI suffix. To handle different issuer URL formats and ensure interoperability with both OAuth 2.0 Authorization Server Metadata and OpenID Connect Discovery 1.0… Client Registration Model Context Protocol · in the page specification/2026-07-28/basic/authorization/client-registration …ization server that issued them, keyed by the authorization server's `issuer` identifier. When the authorization server changes (detected via updated [protected resource metadata](/specification/2026-… Authorization Model Context Protocol · in the page specification/2026-07-28/basic/authorization/index …atracker.ietf.org/doc/html/rfc9728)) * OAuth 2.0 Authorization Server Issuer Identification ([RFC9207](https://datatracker.ietf.org/doc/html/rfc9207)) * OAuth Client ID Metadata Documents ([draft-ietf… Key Changes Model Context Protocol · in the page specification/2026-07-28/changelog …MCP clients **MUST** validate a present `iss` against the recorded issuer before redeeming the authorization code ([SEP-2468](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/24… Authorization Server Discovery Model Context Protocol · in the page specification/draft/basic/authorization/authorization-server-discovery …e an application-specific well-known URI suffix. To handle different issuer URL formats and ensure interoperability with both OAuth 2.0 Authorization Server Metadata and OpenID Connect Discovery 1.0… Client Registration Model Context Protocol · in the page specification/draft/basic/authorization/client-registration …ization server that issued them, keyed by the authorization server's `issuer` identifier. When the authorization server changes (detected via updated [protected resource metadata](/specification/draft… Authorization Model Context Protocol · in the page specification/draft/basic/authorization/index …atracker.ietf.org/doc/html/rfc9728)) * OAuth 2.0 Authorization Server Issuer Identification ([RFC9207](https://datatracker.ietf.org/doc/html/rfc9207)) * OAuth Client ID Metadata Documents ([draft-ietf…