{"name":"issuer","slug":"issuer","family":"setting","title":"Settings keys","noun":"settings key","description":"MCP OAuth token refresh retries smarter and keeps your saved redirect URI across reconnects.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"mcp-oauth-refresh-retries-on-error-codes-and-preserves-issue"},"presence":{"first_seen":"2.1.287","removed_in":"2.1.307","in_current_build":false,"newest_mined":"2.1.308","builds":15,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.265","anchor":"crigateway-loopback-config-validator-gains-an-escape-hatch","heading":"CRI\/gateway loopback config validator gains an escape-hatch env var","line":"Gateway loopback check now also covers cri.issuer and cri.policy.webhook.url, not just cri.jwks_url","released_at":"2026-09-08 19:05:16","reason":"found in this entry's text"},{"version":"2.1.228","anchor":"gateway-gains-a-second-admission-path-for-machine-identities","heading":"Gateway gains a second admission path for machine identities","line":"The self-hosted gateway can admit machine identities that skip managed-settings policy entirely, off by default.","released_at":"2026-08-11 17:45:45","reason":"found in this entry's text"},{"version":"2.1.228","anchor":"gateway-customer-routed-inference-config-disabled-by-default","heading":"Gateway customer-routed inference config, disabled by default","line":"The self-hosted gateway accepts a strict customer-routed inference config block, off unless you enable it.","released_at":"2026-08-11 17:45:45","reason":"found in this entry's text"},{"version":"2.1.224","anchor":"mcp-servers-checked-for-the-issuer-they-echo-back","heading":"MCP servers checked for the issuer they echo back","line":"Claude checks whether an MCP server points authentication elsewhere, logging mismatches without blocking.","released_at":"2026-08-07 01:36:32","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"mcp-oauth-refresh-retries-on-error-codes-and-preserves-issue","heading":"MCP OAuth refresh retries on error codes and preserves issuer and redirect URI","line":"MCP OAuth token refresh retries smarter and keeps your saved redirect URI across reconnects.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"mcp-oauth-tracks-the-issuer-through-the-callback-and-token-e","heading":"MCP OAuth tracks the issuer through the callback and token exchange","line":"MCP OAuth now tracks which authorization server issued your token through login, refresh, and storage.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"mcp-oauth-handles-the-rfc-9207-issuer-parameter","heading":"MCP OAuth handles the RFC 9207 issuer parameter","line":"MCP OAuth logins now verify the issuer and give clearer errors when client registration is rejected.","released_at":"2026-08-03 22:16:25","reason":"found in this entry's text"},{"version":"2.1.83","anchor":"xaa-idp-authentication-for-mcp-servers","heading":"XAA IdP Authentication for MCP Servers","line":null,"released_at":"2026-03-24 22:16:47","reason":"found in this entry's text"}],"entries_total":8,"docs":[{"source":"api","path":"agents-and-tools\/mcp-tunnels\/console","title":"console","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/deploy-compose","title":"Edit docker-compose.yaml: increment the integer in the setup service's","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/deploy-helm","title":"deploy-helm","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/overview","title":"overview","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/quickstart","title":"quickstart","documented":false},{"source":"api","path":"agents-and-tools\/mcp-tunnels\/troubleshooting","title":"troubleshooting","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/code-execution-tool","title":"code-execution-tool","documented":false},{"source":"api","path":"api\/beta\/organization","title":"Organization","documented":false},{"source":"api","path":"api\/beta\/organization\/federation","title":"Federation","documented":false},{"source":"api","path":"api\/beta\/organization\/federation\/issuers","title":"Issuers","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/issuer","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}