| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:12eadf39-23ea-2fb3-18ab-b564baf99ca1 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | D69E:52D98:B8A0FF:104FE9E:6A588A9F |
| html-safe-nonce | 983850a74319e842e33008c6185109aadea4e83d94ad1bc42c6aa6d40dc48fc6 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJENjlFOjUyRDk4OkI4QTBGRjoxMDRGRTlFOjZBNTg4QTlGIiwidmlzaXRvcl9pZCI6IjY5ODgyMDI3NTQ5MzU2NTUwNzEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 38391c07f29d22837ba32b07a9d21ea10138adf2bd2c93b079eba6569b37c036 |
| hovercard-subject-tag | pull_request:3247995231 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/modelcontextprotocol/modelcontextprotocol/2207/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/3d3b54cd56b37bb0fad6d1b2f921bdbab4b52e3034dc7b25dbdf644e75623d7d/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/3d3b54cd56b37bb0fad6d1b2f921bdbab4b52e3034dc7b25dbdf644e75623d7d/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| og:image:alt | This PR introduces guidance for MCP implementations using OIDC-flavored Authorization Servers regarding refresh token issuance and handling of the offline_access scope.
Motivation and Context
MCP b... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | wdawson |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5f2a0c7865178af3d91dd9f13b0cdfc3c73a2529c873d2780bb4c01271a57ec6 |
| turbo-cache-control | no-cache |
| go-import | github.com/modelcontextprotocol/modelcontextprotocol git https://github.com/modelcontextprotocol/modelcontextprotocol.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 862570523 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/modelcontextprotocol |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 862570523 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/modelcontextprotocol |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 8aae7b8d6caacacf5c66eaeb2702d8dc88d85b4a |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2207 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2207 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=modelcontextprotocol%2Fmodelcontextprotocol |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| Reload | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
|
modelcontextprotocol
| https://github.com/modelcontextprotocol |
| modelcontextprotocol | https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Notifications
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Fork
1.7k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Star
8.6k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
113
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
79
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
0
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
|
Code
| https://github.com/modelcontextprotocol/modelcontextprotocol |
|
Issues
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues |
|
Pull requests
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulls |
|
Discussions
| https://github.com/modelcontextprotocol/modelcontextprotocol/discussions |
|
Actions
| https://github.com/modelcontextprotocol/modelcontextprotocol/actions |
|
Projects
| https://github.com/modelcontextprotocol/modelcontextprotocol/projects |
|
Models
| https://github.com/modelcontextprotocol/modelcontextprotocol/models |
|
Security and quality
| https://github.com/modelcontextprotocol/modelcontextprotocol/security |
|
Insights
| https://github.com/modelcontextprotocol/modelcontextprotocol/pulse |
| mcp-commander[bot] | https://github.com/mcp-commander[bot] |
| modelcontextprotocol:main | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/main |
| ArcadeAI:doc/oidc-refresh | https://github.com/ArcadeAI/modelcontextprotocol/tree/doc/oidc-refresh |
| Conversation | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| Commits18 (18) | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits |
| Checks | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/checks |
| Files changed | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files |
| SEP-2207: OIDC-flavored refresh token guidance | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#top |
| mcp-commander[bot] | https://github.com/mcp-commander[bot] |
| modelcontextprotocol:main | https://github.com/modelcontextprotocol/modelcontextprotocol/tree/main |
| ArcadeAI:doc/oidc-refresh | https://github.com/ArcadeAI/modelcontextprotocol/tree/doc/oidc-refresh |
|
| https://github.com/wdawson |
| wdawson | https://github.com/wdawson |
| Feb 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#issue-3899037168 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| MCP Authorization channel (Jan 2026) | https://discord.com/channels/1358869848138059966/1463223140552540297 |
| feat (auth): add sep-2207 client checks conformance#166 | https://github.com/modelcontextprotocol/conformance/pull/166 |
| SEP-2207: Refresh token guidance python-sdk#2039 | https://github.com/modelcontextprotocol/python-sdk/pull/2039 |
| SEP-2207: Refresh token guidance typescript-sdk#1523 | https://github.com/modelcontextprotocol/typescript-sdk/pull/1523 |
| feat(auth): implement SEP-2207 OIDC-flavored refresh token guidance rust-sdk#676 | https://github.com/modelcontextprotocol/rust-sdk/pull/676 |
| Arcade.dev | https://www.arcade.dev |
| MCP Gateways | https://docs.arcade.dev/en/guides/mcp-gateways |
| MCP Documentation | https://modelcontextprotocol.io |
| @pcarleton | https://github.com/pcarleton |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| wdawson | https://github.com/wdawson |
| February 4, 2026 16:19 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#commits-pushed-b5fd83b |
|
| https://github.com/wdawson |
| feat: Add draft SEP for refresh tokens | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/b5fd83b7cc7c0f542fb1fe03058e9e783001ee77 |
| b5fd83b | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/b5fd83b7cc7c0f542fb1fe03058e9e783001ee77 |
|
| https://github.com/wdawson |
| feat: Update auth specification draft adding refresh token clarity | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/eda2f5e47dba5296e288c96ab2f5546587f69aa4 |
| eda2f5e | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/eda2f5e47dba5296e288c96ab2f5546587f69aa4 |
|
| https://github.com/wdawson |
| fix formatting | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/8c1e3596ce29aef2cc086b9b752614edaa8b6f95 |
| 8c1e359 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/8c1e3596ce29aef2cc086b9b752614edaa8b6f95 |
| https://github.com/wdawson |
| wdawson | https://github.com/wdawson |
| code owner | https://github.com/modelcontextprotocol/modelcontextprotocol/blob/94daefdbbee8ae92037e690b70177c9dc562e5a0/.github/CODEOWNERS#L4 |
| February 5, 2026 00:37 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-22544112376 |
|
| https://github.com/wdawson |
| fix: Update with PR number | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f |
| b0fd8c6 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f |
| https://github.com/nbarbettini |
| nbarbettini | https://github.com/nbarbettini |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3754365633 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/specification/draft/basic/authorization.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f#diff-f5612d77c1fcfebef344f3c2f7a0d858ad81765bcb11d6ac20dc1e95519978fb |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
|
| https://github.com/wdawson |
| Address Nate's feedback | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/62460472604eb24a755d48c731c773ca9891d8c8 |
| 6246047 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/62460472604eb24a755d48c731c773ca9891d8c8 |
| https://github.com/wdawson |
| wdawson | https://github.com/wdawson |
| Feb 5, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-22561204427 |
| wdawson | https://github.com/wdawson |
| February 5, 2026 06:56 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#commits-pushed-6b07715 |
|
| https://github.com/wdawson |
| fix: update sponsor | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/6b0771549dbbb944422ffef6a72f29ddd7d18e27 |
| 6b07715 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/6b0771549dbbb944422ffef6a72f29ddd7d18e27 |
|
| https://github.com/wdawson |
| generate sep doc | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| bc71309 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3758767189 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3758783473 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3758785077 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| docs/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3#diff-d0ba62b8311a41ff9c85de1d0ac29001544caae881742666c8084e619d13f97c |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3758787576 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| docs/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3#diff-d0ba62b8311a41ff9c85de1d0ac29001544caae881742666c8084e619d13f97c |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/mcguinness |
| mcguinness | https://github.com/mcguinness |
|
Feb 5, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3759442572 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
| docs/community/seps/2207-oidc-refresh-token-guidance.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3#diff-14b2566c9a56dc578ab5c4c8945cfbbe2d91add4dc80ca5d853e33ed70c65928 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
|
| https://github.com/wdawson |
| fix: Incorporate feedback | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/dbe4f7d6d2ef24dac5109a31356f2a78e2b9c864 |
| dbe4f7d | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/dbe4f7d6d2ef24dac5109a31356f2a78e2b9c864 |
| https://github.com/wdawson |
| wdawson | https://github.com/wdawson |
| pcarleton | https://github.com/pcarleton |
| February 5, 2026 22:39 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-22573169994 |
| https://github.com/localden |
| localden | https://github.com/localden |
| pcarleton | https://github.com/pcarleton |
| Feb 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-22578315891 |
| https://github.com/localden |
| localden | https://github.com/localden |
|
auth
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth |
|
security
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity |
| Feb 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-22578318323 |
| https://github.com/localden |
| localden | https://github.com/localden |
|
Feb 6, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3760774156 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/dbe4f7d6d2ef24dac5109a31356f2a78e2b9c864 |
| localden | https://github.com/localden |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3760774156 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/localden |
| localden | https://github.com/localden |
| Feb 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#issuecomment-3857978027 |
| @wdawson | https://github.com/wdawson |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| wdawson | https://github.com/wdawson |
| February 5, 2026 21:12 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#commits-pushed-8d1060c |
|
| https://github.com/wdawson |
| fix: address feedback from Den | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/8d1060c92a010273c705a65b7fd2ee74d71fa41f |
| 8d1060c | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/8d1060c92a010273c705a65b7fd2ee74d71fa41f |
|
| https://github.com/wdawson |
| Merge branch 'main' into doc/oidc-refresh | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/60966c94317b4e6c033a67a0b3a02d0ea4523724 |
| 60966c9 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/commits/60966c94317b4e6c033a67a0b3a02d0ea4523724 |
| https://github.com/wdawson |
| wdawson | https://github.com/wdawson |
|
Feb 6, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3760856646 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/60966c94317b4e6c033a67a0b3a02d0ea4523724 |
| docs/specification/draft/basic/authorization.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/60966c94317b4e6c033a67a0b3a02d0ea4523724#diff-f5612d77c1fcfebef344f3c2f7a0d858ad81765bcb11d6ac20dc1e95519978fb |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
|
SEP-2207: Refresh token guidance
modelcontextprotocol/python-sdk#2039
| https://github.com/modelcontextprotocol/python-sdk/pull/2039 |
|
SEP-2207: Refresh token guidance
modelcontextprotocol/typescript-sdk#1523
| https://github.com/modelcontextprotocol/typescript-sdk/pull/1523 |
|
feat(auth): implement SEP-2207 OIDC-flavored refresh token guidance
modelcontextprotocol/rust-sdk#676
| https://github.com/modelcontextprotocol/rust-sdk/pull/676 |
|
feat (auth): add sep-2207 client checks
modelcontextprotocol/conformance#166
| https://github.com/modelcontextprotocol/conformance/pull/166 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
Feb 24, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#pullrequestreview-3848889310 |
|
View reviewed changes
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/60966c94317b4e6c033a67a0b3a02d0ea4523724 |
| docs/specification/draft/basic/authorization.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/60966c94317b4e6c033a67a0b3a02d0ea4523724#diff-f5612d77c1fcfebef344f3c2f7a0d858ad81765bcb11d6ac20dc1e95519978fb |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| docs/specification/draft/basic/authorization.mdx | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/60966c94317b4e6c033a67a0b3a02d0ea4523724#diff-f5612d77c1fcfebef344f3c2f7a0d858ad81765bcb11d6ac20dc1e95519978fb |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
| https://github.com/localden |
| localden | https://github.com/localden |
|
final
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal |
|
accepted
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aaccepted |
| Apr 17, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-24620414257 |
| https://github.com/apps/mcp-virtual-tpm |
| mcp-virtual-tpm | https://github.com/apps/mcp-virtual-tpm |
| 2026-06-30-RC | https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4 |
| 2026-06-30-FINAL | https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/5 |
| Apr 28, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-24958520834 |
| https://github.com/mikekistler |
| mikekistler | https://github.com/mikekistler |
|
Apr 30, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4354468114 |
|
2026-07-28 Spec Compliance
modelcontextprotocol/csharp-sdk#1539
| https://github.com/modelcontextprotocol/csharp-sdk/issues/1539 |
| https://github.com/localden |
| localden | https://github.com/localden |
| 2026-06-30-FINAL | https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/5 |
| 2026-06-30-RC | https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4 |
| May 19, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-25687904153 |
| https://github.com/pcarleton |
| pcarleton | https://github.com/pcarleton |
|
May 19, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-pullrequest-4481857220 |
|
chore: add SEP-2207 requirement-traceability YAML (OIDC refresh tokens)
modelcontextprotocol/conformance#294
| https://github.com/modelcontextprotocol/conformance/pull/294 |
| https://github.com/panyam |
| panyam | https://github.com/panyam |
|
May 24, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4512263855 |
|
oauth: implement SEP-2207 offline-access scope handling
panyam/mcpkit#449
| https://github.com/panyam/mcpkit/issues/449 |
|
[2026-07-28] Authorization hardening (OAuth/OIDC)
modelcontextprotocol/php-sdk#338
| https://github.com/modelcontextprotocol/php-sdk/issues/338 |
|
[Client][Auth] SEP-2207: Request offline_access scope against OIDC-flavored AS for refresh tokens
modelcontextprotocol/php-sdk#363
| https://github.com/modelcontextprotocol/php-sdk/issues/363 |
|
[Server][Auth] SEP-2207: Audit PRM to ensure offline_access is not advertised as a required scope
modelcontextprotocol/php-sdk#364
| https://github.com/modelcontextprotocol/php-sdk/issues/364 |
|
[Client] Implement OAuth 2.0 Authorization Code flow with PKCE (RFC 6749 + RFC 7636)
modelcontextprotocol/php-sdk#319
| https://github.com/modelcontextprotocol/php-sdk/issues/319 |
|
[Client] Implement refresh_token grant + offline_access scope
modelcontextprotocol/php-sdk#323
| https://github.com/modelcontextprotocol/php-sdk/issues/323 |
| https://github.com/felixweinberger |
| felixweinberger | https://github.com/felixweinberger |
|
May 29, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4547541694 |
|
Implement SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/typescript-sdk#2199
| https://github.com/modelcontextprotocol/typescript-sdk/issues/2199 |
| https://github.com/alexhancock |
| alexhancock | https://github.com/alexhancock |
|
Jun 2, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4573029375 |
|
Verify SEP-2207: OIDC refresh token handling (already implemented via #676)
modelcontextprotocol/rust-sdk#882
| https://github.com/modelcontextprotocol/rust-sdk/issues/882 |
| https://github.com/apps/github-project-automation |
| github-project-automation | https://github.com/apps/github-project-automation |
| 2026-07-28 Spec Implementation | https://github.com/orgs/modelcontextprotocol/projects/41 |
| Jun 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-26416909011 |
| https://github.com/localden |
| localden | https://github.com/localden |
| 2026-07-28 Spec Implementation | https://github.com/orgs/modelcontextprotocol/projects/41 |
| Jun 6, 2026 | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#event-26416909066 |
|
SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/csharp-sdk#1632
| https://github.com/modelcontextprotocol/csharp-sdk/issues/1632 |
|
SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/java-sdk#1002
| https://github.com/modelcontextprotocol/java-sdk/issues/1002 |
|
Implement SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/kotlin-sdk#806
| https://github.com/modelcontextprotocol/kotlin-sdk/issues/806 |
|
Implement SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/python-sdk#2795
| https://github.com/modelcontextprotocol/python-sdk/issues/2795 |
|
SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/ruby-sdk#380
| https://github.com/modelcontextprotocol/ruby-sdk/issues/380 |
|
Implement SEP-2207: OIDC-flavored refresh token guidance
modelcontextprotocol/swift-sdk#236
| https://github.com/modelcontextprotocol/swift-sdk/issues/236 |
|
(implementation): SEP-2207 - OIDC-flavored refresh token guidance
#2874
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2874 |
| https://github.com/maxisbey |
| maxisbey | https://github.com/maxisbey |
|
Jun 17, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4682676338 |
|
Auth — 2026 client-side requirements
modelcontextprotocol/python-sdk#2902
| https://github.com/modelcontextprotocol/python-sdk/issues/2902 |
|
feat(client): SEP-837/2207 — application_type heuristic, grant_types default, https token-endpoint guard
modelcontextprotocol/typescript-sdk#2345
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2345 |
|
feat(client): SEP-837/2207 — application_type heuristic, grant_types default, https token-endpoint guard
modelcontextprotocol/typescript-sdk#2355
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2355 |
| https://github.com/BobDickinson |
| BobDickinson | https://github.com/BobDickinson |
|
Jun 26, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-issue-4749783948 |
|
[MCP 2026-07-28] Authorization hardening
modelcontextprotocol/inspector#1527
| https://github.com/modelcontextprotocol/inspector/issues/1527 |
| https://github.com/felixweinberger |
| felixweinberger | https://github.com/felixweinberger |
|
Jun 26, 2026
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207#ref-pullrequest-4650383987 |
|
Implement MCP 2026-07-28
modelcontextprotocol/typescript-sdk#2286
| https://github.com/modelcontextprotocol/typescript-sdk/pull/2286 |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2207 |
|
| https://github.com/localden |
|
localden
| https://github.com/localden |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/dbe4f7d6d2ef24dac5109a31356f2a78e2b9c864 |
|
| https://github.com/apps/mcp-commander |
|
mcp-commander[bot]
| https://github.com/apps/mcp-commander |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/a33e37b5de067dd3c99bc9fd5cb6e142983a987f |
|
| https://github.com/apps/github-actions |
|
github-actions[bot]
| https://github.com/apps/github-actions |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/8ad82ce70839dc5e658244b1b6d7e07c8d6625d4 |
|
| https://github.com/pcarleton |
|
pcarleton
| https://github.com/pcarleton |
|
| https://github.com/mcguinness |
|
mcguinness
| https://github.com/mcguinness |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/bc71309b6d784f31a4bf991eb28af4426bce47e3 |
|
| https://github.com/nbarbettini |
|
nbarbettini
| https://github.com/nbarbettini |
|
| https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207/files/b0fd8c65d00788c4a8fa2b1ce0d79b3d0d40120f |
|
| https://github.com/pcarleton |
|
pcarleton
| https://github.com/pcarleton |
|
approved
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aapproved |
|
auth
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth |
|
final
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal |
|
security
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity |
|
SEP
| https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3ASEP |
|
2026-07-28 Spec Implementation
| https://github.com/orgs/modelcontextprotocol/projects/41 |
|
SEP Review Pipeline
| https://github.com/orgs/modelcontextprotocol/projects/12 |
|
2026-07-28-RC
| https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4 |
| Please reload this page | https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2207 |
|
| https://github.com/wdawson |
|
| https://github.com/localden |
|
| https://github.com/kurtisvg |
|
| https://github.com/pcarleton |
|
| https://github.com/mcguinness |
|
| https://github.com/nbarbettini |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |