René's URL Explorer Experiment


Title: SEP-2350: accumulate scopes on step-up auth by dogacancolak · Pull Request #2676 · modelcontextprotocol/python-sdk · GitHub

Open Graph Title: SEP-2350: accumulate scopes on step-up auth by dogacancolak · Pull Request #2676 · modelcontextprotocol/python-sdk

X Title: SEP-2350: accumulate scopes on step-up auth by dogacancolak · Pull Request #2676 · modelcontextprotocol/python-sdk

Description: The official Python SDK for Model Context Protocol servers and clients - SEP-2350: accumulate scopes on step-up auth by dogacancolak · Pull Request #2676 · modelcontextprotocol/python-sdk

Open Graph Description: Implements MCP spec PR #2350 (closes #2349): on a 403 insufficient_scope step-up challenge, the client now unions the challenge scopes with its previously-requested scope set instead of replacing t...

X Description: Implements MCP spec PR #2350 (closes #2349): on a 403 insufficient_scope step-up challenge, the client now unions the challenge scopes with its previously-requested scope set instead of replacing t...

Opengraph URL: https://github.com/modelcontextprotocol/python-sdk/pull/2676

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:955e9d6e-cd43-534f-e909-6217d02e9b9b
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8FFE:368FEA:18287DF:22E0778:6A58C042
html-safe-nonce7d97b924cddf51452cce655a514abf2c068c121bf86a389cf6e10953cfb47410
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RkZFOjM2OEZFQToxODI4N0RGOjIyRTA3Nzg6NkE1OEMwNDIiLCJ2aXNpdG9yX2lkIjoiMjU3NTc5MjU2MzIyODgxOTUyMiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacb29dff08b1202e837f656a3ad4563dff1df28bcc9f7391e468994284025cfd68
hovercard-subject-tagpull_request:3738959452
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/modelcontextprotocol/python-sdk/2676/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/b96a9c1f3101e8bebe44cdf8b4a36566a44c5c0f879c6263010f76948a01832f/modelcontextprotocol/python-sdk/pull/2676
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/b96a9c1f3101e8bebe44cdf8b4a36566a44c5c0f879c6263010f76948a01832f/modelcontextprotocol/python-sdk/pull/2676
og:image:altImplements MCP spec PR #2350 (closes #2349): on a 403 insufficient_scope step-up challenge, the client now unions the challenge scopes with its previously-requested scope set instead of replacing t...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamedogacancolak
hostnamegithub.com
expected-hostnamegithub.com
None5f2a0c7865178af3d91dd9f13b0cdfc3c73a2529c873d2780bb4c01271a57ec6
turbo-cache-controlno-cache
go-importgithub.com/modelcontextprotocol/python-sdk git https://github.com/modelcontextprotocol/python-sdk.git
octolytics-dimension-user_id182288589
octolytics-dimension-user_loginmodelcontextprotocol
octolytics-dimension-repository_id862584018
octolytics-dimension-repository_nwomodelcontextprotocol/python-sdk
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id862584018
octolytics-dimension-repository_network_root_nwomodelcontextprotocol/python-sdk
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release8aae7b8d6caacacf5c66eaeb2702d8dc88d85b4a
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/modelcontextprotocol/python-sdk/pull/2676#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fpython-sdk%2Fpull%2F2676
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fpython-sdk%2Fpull%2F2676
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=modelcontextprotocol%2Fpython-sdk
Reloadhttps://github.com/modelcontextprotocol/python-sdk/pull/2676
Reloadhttps://github.com/modelcontextprotocol/python-sdk/pull/2676
Reloadhttps://github.com/modelcontextprotocol/python-sdk/pull/2676
Please reload this pagehttps://github.com/modelcontextprotocol/python-sdk/pull/2676
modelcontextprotocol https://github.com/modelcontextprotocol
python-sdkhttps://github.com/modelcontextprotocol/python-sdk
Notifications https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk
Fork 3.7k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk
Star 23.6k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk
Code https://github.com/modelcontextprotocol/python-sdk
Issues 254 https://github.com/modelcontextprotocol/python-sdk/issues
Pull requests 290 https://github.com/modelcontextprotocol/python-sdk/pulls
Actions https://github.com/modelcontextprotocol/python-sdk/actions
Projects https://github.com/modelcontextprotocol/python-sdk/projects
Models https://github.com/modelcontextprotocol/python-sdk/models
Security and quality 6 https://github.com/modelcontextprotocol/python-sdk/security
Insights https://github.com/modelcontextprotocol/python-sdk/pulse
Code https://github.com/modelcontextprotocol/python-sdk
Issues https://github.com/modelcontextprotocol/python-sdk/issues
Pull requests https://github.com/modelcontextprotocol/python-sdk/pulls
Actions https://github.com/modelcontextprotocol/python-sdk/actions
Projects https://github.com/modelcontextprotocol/python-sdk/projects
Models https://github.com/modelcontextprotocol/python-sdk/models
Security and quality https://github.com/modelcontextprotocol/python-sdk/security
Insights https://github.com/modelcontextprotocol/python-sdk/pulse
dogacancolakhttps://github.com/dogacancolak
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/python-sdk/tree/main
dogacancolak:dc/mcp-python-sdk/scope-accumulation-step-uphttps://github.com/dogacancolak/mcp-python-sdk/tree/dc/mcp-python-sdk/scope-accumulation-step-up
Conversationhttps://github.com/modelcontextprotocol/python-sdk/pull/2676
Commits3 (3)https://github.com/modelcontextprotocol/python-sdk/pull/2676/commits
Checkshttps://github.com/modelcontextprotocol/python-sdk/pull/2676/checks
Files changedhttps://github.com/modelcontextprotocol/python-sdk/pull/2676/files
SEP-2350: accumulate scopes on step-up authhttps://github.com/modelcontextprotocol/python-sdk/pull/2676#top
dogacancolakhttps://github.com/dogacancolak
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/python-sdk/tree/main
dogacancolak:dc/mcp-python-sdk/scope-accumulation-step-uphttps://github.com/dogacancolak/mcp-python-sdk/tree/dc/mcp-python-sdk/scope-accumulation-step-up
https://github.com/dogacancolak
dogacancolakhttps://github.com/dogacancolak
May 24, 2026https://github.com/modelcontextprotocol/python-sdk/pull/2676#issue-4513333034
#2350https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2350
#2349https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349
Please reload this pagehttps://github.com/modelcontextprotocol/python-sdk/pull/2676
dogacancolakhttps://github.com/dogacancolak
May 24, 2026 19:21https://github.com/modelcontextprotocol/python-sdk/pull/2676#commits-pushed-61635c6
https://github.com/dogacancolak
auth: add union_scopes helper for OAuth scope stringshttps://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/61635c668c6f8cf31565b05000d59d524c0e79be
61635c6https://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/61635c668c6f8cf31565b05000d59d524c0e79be
https://github.com/dogacancolak
auth: union scopes on 403 step-up (SEP-2350)https://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/c231be995194177dfcb87b7a5fc265490386991a
c231be9https://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/c231be995194177dfcb87b7a5fc265490386991a
https://github.com/dogacancolak
auth: test union_scopes and step-up authorization flowhttps://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/a4bdbde65d492219a2ec08b667a09a24d9137e87
a4bdbdehttps://github.com/modelcontextprotocol/python-sdk/pull/2676/commits/a4bdbde65d492219a2ec08b667a09a24d9137e87
https://github.com/dogacancolak
dogacancolakhttps://github.com/dogacancolak
May 24, 2026https://github.com/modelcontextprotocol/python-sdk/pull/2676#event-25907195858
https://github.com/dogacancolak
dogacancolakhttps://github.com/dogacancolak
May 25, 2026 01:06https://github.com/modelcontextprotocol/python-sdk/pull/2676#event-25908272704
https://github.com/SamMorrowDrums
SamMorrowDrumshttps://github.com/SamMorrowDrums
May 26, 2026https://github.com/modelcontextprotocol/python-sdk/pull/2676#issuecomment-4543702111
@dogacancolakhttps://github.com/dogacancolak
#2676https://github.com/modelcontextprotocol/python-sdk/pull/2676
#1624https://github.com/modelcontextprotocol/python-sdk/pull/1624
Python mainhttps://github.com/modelcontextprotocol/python-sdk/blob/72309f57/src/mcp/client/auth/oauth2.py#L529-L585
PR #2676https://github.com/modelcontextprotocol/python-sdk/pull/2676
Swifthttps://github.com/modelcontextprotocol/swift-sdk/blob/b2e5be3b/Sources/MCP/Base/Authorization/OAuthAuthorizer.swift#L236-L302
Rusthttps://github.com/modelcontextprotocol/rust-sdk/blob/3aa3e913/crates/rmcp/src/transport/auth.rs#L1036-L1084
C#https://github.com/modelcontextprotocol/csharp-sdk/blob/c376f932/src/ModelContextProtocol.Core/Authentication/ClientOAuthProvider.cs#L275-L316
Rubyhttps://github.com/modelcontextprotocol/ruby-sdk/blob/3708a48e/lib/mcp/client/oauth/flow.rb#L390-L404
TypeScript mainhttps://github.com/modelcontextprotocol/typescript-sdk/blob/3b8ddafe/packages/client/src/client/streamableHttp.ts#L258-L263
Go SDKhttps://github.com/modelcontextprotocol/go-sdk/blob/47541f99/auth/authorization_code.go#L298-L301
TypeScript PR #1657https://github.com/modelcontextprotocol/typescript-sdk/pull/1657
@dendhttps://github.com/dend
client_metadata.scopehttps://github.com/modelcontextprotocol/python-sdk/pull/2676/files
Swift SDKhttps://github.com/modelcontextprotocol/swift-sdk/blob/b2e5be3b/Sources/MCP/Base/Authorization/OAuthAuthorizer.swift#L304-L365
Rusthttps://github.com/modelcontextprotocol/rust-sdk/blob/3aa3e913/crates/rmcp/src/transport/auth.rs#L1101-L1131
#1624https://github.com/modelcontextprotocol/python-sdk/pull/1624
Please reload this pagehttps://github.com/modelcontextprotocol/python-sdk/pull/2676
https://github.com/localden
localdenhttps://github.com/localden
Jun 6, 2026 https://github.com/modelcontextprotocol/python-sdk/pull/2676#ref-issue-4602774490
Implement SEP-2350: Clarify client-side scope accumulation in step-up authorization #2798 https://github.com/modelcontextprotocol/python-sdk/issues/2798
https://github.co/hiddenchars
https://github.com/modelcontextprotocol/python-sdk/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fpython-sdk%2Fpull%2F2676
Clarify client-side scope accumulation behaviour during step-up authorization https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2349
Please reload this pagehttps://github.com/modelcontextprotocol/python-sdk/pull/2676
https://github.com/dogacancolak
https://github.com/SamMorrowDrums
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.