{"version":"2.1.51","anchor":"mcp-oauth-improvements","canonical_anchor":"mcp-oauth-improvements","heading":"MCP OAuth Improvements","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.51\/e\/mcp-oauth-improvements","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.51","markdown":"### MCP OAuth Improvements\n\n- Step-up scopes are now persisted across auth revocations, preventing users from having to re-authorize expanded permissions\n- OAuth discovery state (authorization server URL, resource metadata) is cached to avoid repeated discovery requests\n- New `skipBrowserOpen` option for headless environments \u2014 logs the authorization URL instead of opening a browser\n- `preserveStepUpState` flag during MCP authentication prevents loss of elevated permissions\n\n**Evidence**\n\n`\"Persisted step-up scope:\"` log message, `\"Saving discovery state\"` log message (search for `\"Persisted step-up scope\"`)"}