Skip to content

mcp: OIDC-Flavored Refresh Token Guidance#939

Open
guglielmo-san wants to merge 3 commits intomainfrom
guglielmoc/SEP-2207_OIDC-flavored
Open

mcp: OIDC-Flavored Refresh Token Guidance#939
guglielmo-san wants to merge 3 commits intomainfrom
guglielmoc/SEP-2207_OIDC-flavored

Conversation

@guglielmo-san
Copy link
Copy Markdown
Contributor

@guglielmo-san guglielmo-san commented May 6, 2026

@guglielmo-san guglielmo-san marked this pull request as ready for review May 6, 2026 07:26
// in its scopes_supported, the client adds "offline_access" to the
// requested scopes.
//
// When using Dynamic Client Registration, callers should include
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we also add an equivalent comment for Client ID Metadata Document users?

// directly to advertise refresh token support to the Authorization Server.
//
// See https://modelcontextprotocol.io/seps/2207-oidc-refresh-token-guidance.
RequestRefreshToken bool
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be good to verify across SEPs that we don't require any more scopes related settings. If we do, maybe we should consider grouping them?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement SEP-2207: OIDC-Flavored Refresh Token Guidance

2 participants