Choose one resource
Register the API or MCP server the client is asking to reach—not the user’s entire account.
MCP AuthorizationAvailable now
Don’t give an AI client the user’s whole session.
Let the user approve one protected resource and a defined set of actions. Issue the client a short-lived token for that audience, then verify it at your MCP server or API.
Approve specific actions
Ask for explicit scopes and preserve the grant instead of handing the client a broad credential.
Enforce at the resource
Validate issuer, signature, audience, expiry, and scope before your server performs the action.
Product scope
One resource. Explicit actions. A short expiry.
MCP Authorization is available now for customer-owned MCP servers and APIs. Production agent delegation, sender-constrained tokens, and the broader Agent Access lifecycle remain separate roadmap work.
- Generated RFC 9728 metadata and challenge values for customer-hosted resource metadata
- Environment-scoped resource servers
- Explicit scopes and grants
- Resource-aware authorization requests
- 15-minute audience-bound signed access tokens
- Consent and grant audit evidence
Available now