269 pages for login.

Security Best Practices Model Context Protocol · in the page docs/2025-11-25/tutorials/security/security_best_practices …ant Server participant Attacker Client->>Server: Initialize (login/authenticate) Server-->>Client: Respond with session ID (persistent session created) Attacker->>Server: Access/gues… Authorization Model Context Protocol · in the page docs/2026-07-28/tools/inspector/authorization …flow in all three clients, sharing the resulting tokens on disk so a login done once is usable everywhere. ## The flow, end to end **1. Connect, and get refused** The Inspector connects to the ser… Configuration and flags Model Context Protocol · in the page docs/2026-07-28/tools/inspector/configuration …fish`) | | **Auth** | `--use-stored-auth`, `--stored-auth-only`, `--relogin`, `--no-revoke`, `--wait-for-auth`, `--list-stored-auth`, `--print-handoff` | ## Environment variables Environment variabl… mcpdo connection client Model Context Protocol · in the page docs/2026-07-28/tools/inspector/mcpdo …`mcpdo`. | Command | Effect | | - | - | | `mcpdo connect <name> --relogin` (`-r`) | Clear this server's stored tokens before connecting (HTTP/SSE only), so it signs in fresh if the server requires a… Authorization Model Context Protocol · in the page docs/draft/tools/inspector/authorization …flow in all three clients, sharing the resulting tokens on disk so a login done once is usable everywhere. ## The flow, end to end **1. Connect, and get refused** The Inspector connects to the ser… Configuration and flags Model Context Protocol · in the page docs/draft/tools/inspector/configuration …fish`) | | **Auth** | `--use-stored-auth`, `--stored-auth-only`, `--relogin`, `--no-revoke`, `--wait-for-auth`, `--list-stored-auth`, `--print-handoff` | ## Environment variables Environment variabl… mcpdo connection client Model Context Protocol · in the page docs/draft/tools/inspector/mcpdo …`mcpdo`. | Command | Effect | | - | - | | `mcpdo connect <name> --relogin` (`-r`) | Clear this server's stored tokens before connecting (HTTP/SSE only), so it signs in fresh if the server requires a… Enterprise-Managed Authorization Model Context Protocol · in the page extensions/auth/enterprise-managed-authorization …Assertion (either an OpenID ID Token or SAML assertion) issued during login for later use. 3. **Handle ID-JAGs** — when the server indicates that enterprise-managed auth is required, request an ID-JA… Extension Support Matrix Model Context Protocol · in the page extensions/client-matrix …lient-credentials` | Machine-to-machine auth without interactive user login | | [Enterprise-Managed Authorization](/extensions/auth/enterprise-managed-authorization.md) | `io.modelcontextprotocol/ente… How to Authenticate When Publishing to the Official MCP Registry Model Context Protocol · in the page registry/authentication …server project directory and run: ```bash theme={null} mcp-publisher login github ``` You should see output like: ```text Output theme={null} Logging in with github... To authenticate, please: 1.… How to Automate Publishing with GitHub Actions Model Context Protocol · in the page registry/github-actions …- name: Authenticate to MCP Registry run: ./mcp-publisher login github-oidc # Optional: # - name: Set version in server.json # run: | # VERSION=${GITHUB_REF#… Quickstart: Publish an MCP Server to the MCP Registry Model Context Protocol · in the page registry/quickstart …ents] Commands: init Create a server.json file template login Authenticate with the registry logout Clear saved authentication publish Publish server.json to the… SEP-1036: URL Mode Elicitation for secure out-of-band interactions Model Context Protocol · in the page seps/1036-url-mode-elicitation-for-secure-out-of-band-intera …550e8400-e29b-41d4-a716-446655440000", "url": "https://github.com/login/oauth/authorize?client_id=abc123&state=xyz789&scope=repo", "message": "Please authorize access to your GitHub repositori… SEP-2322: Multi Round-Trip Requests Model Context Protocol · in the page seps/2322-MRTR …5 theme={null} "inputRequests": { // Elicitation request. "github_login": { "method": "elicitation/create", "params": { "mode": "form", "message": "Please provide your GitHub u… SEP-991: Enable URL-based Client Registration using OAuth Client ID Metadata Documents Model Context Protocol · in the page seps/991-enable-url-based-client-registration-using-oauth-c …ones to attest to the clients identity, such as the client's standard login flow. Using short lived JWTs reduces the risk of credential compromise and replay, but does not eliminate it entirely - an a… Multi Round-Trip Requests Model Context Protocol · in the page specification/2026-07-28/basic/patterns/mrtr …26-07-28/schema#listrootsrequest)). ```json theme={null} { "github_login": { "method": "elicitation/create", "params": { "mode": "form", "message": "Please provide your GitHub u… Tools Model Context Protocol · in the page specification/2026-07-28/server/tools …"resultType": "input_required", "inputRequests": { "github_login": { "method": "elicitation/create", "params": { "mode": "form", "message": "Please provi… Multi Round-Trip Requests Model Context Protocol · in the page specification/draft/basic/patterns/mrtr …on/draft/schema#listrootsrequest)). ```json theme={null} { "github_login": { "method": "elicitation/create", "params": { "mode": "form", "message": "Please provide your GitHub u… Tools Model Context Protocol · in the page specification/draft/server/tools …"resultType": "input_required", "inputRequests": { "github_login": { "method": "elicitation/create", "params": { "mode": "form", "message": "Please provi…