| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:396f2870-ea30-4be7-51e0-c72f1d0ba35a |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 87DA:169AAA:13411E0:19AB932:6A5AA6E4 |
| html-safe-nonce | 6244f552eb1caab37e1cbbb77293671acfeca9a5f913c6b159044ef3ce1a46b1 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4N0RBOjE2OUFBQToxMzQxMUUwOjE5QUI5MzI6NkE1QUE2RTQiLCJ2aXNpdG9yX2lkIjoiNjk0NTg1MTUzODQyMzg1MDcyNCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 47d668295a7bafa1330a7d5904a3279d86f7f8a1d9fb5bcba1df0c93565489f1 |
| hovercard-subject-tag | pull_request:3941294280 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show/files |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| twitter:image | https://avatars.githubusercontent.com/u/7353520?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/7353520?s=400&v=4 |
| og:image:alt | Summary
Implements SEP-990 (enterprise IdP policy controls during MCP OAuth flows). The wire mechanism is the RFC 8693 token-exchange grant (urn:ietf:params:oauth:grant-type:token-exchange): a clie... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 17a57ee6ab03686731c491fccb57e6a97c066a29d7cdf1a7d83c46f5c56684fc |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/modelcontextprotocol/python-sdk git https://github.com/modelcontextprotocol/python-sdk.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 862584018 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/python-sdk |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 862584018 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/python-sdk |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 5cb870aa6b86b87be75e23ca7caec54726a25af9 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fpython-sdk%2Fpull%2F2988%2Ffiles |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fpython-sdk%2Fpull%2F2988%2Ffiles |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=modelcontextprotocol%2Fpython-sdk |
| Reload | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Reload | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Reload | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
|
modelcontextprotocol
| https://github.com/modelcontextprotocol |
| python-sdk | https://github.com/modelcontextprotocol/python-sdk |
|
Notifications
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk |
|
Fork
3.7k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk |
|
Star
23.6k
| https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk |
|
Code
| https://github.com/modelcontextprotocol/python-sdk |
|
Issues
257
| https://github.com/modelcontextprotocol/python-sdk/issues |
|
Pull requests
303
| https://github.com/modelcontextprotocol/python-sdk/pulls |
|
Actions
| https://github.com/modelcontextprotocol/python-sdk/actions |
|
Projects
| https://github.com/modelcontextprotocol/python-sdk/projects |
|
Models
| https://github.com/modelcontextprotocol/python-sdk/models |
|
Security and quality
6
| https://github.com/modelcontextprotocol/python-sdk/security |
|
Insights
| https://github.com/modelcontextprotocol/python-sdk/pulse |
|
Code
| https://github.com/modelcontextprotocol/python-sdk |
|
Issues
| https://github.com/modelcontextprotocol/python-sdk/issues |
|
Pull requests
| https://github.com/modelcontextprotocol/python-sdk/pulls |
|
Actions
| https://github.com/modelcontextprotocol/python-sdk/actions |
|
Projects
| https://github.com/modelcontextprotocol/python-sdk/projects |
|
Models
| https://github.com/modelcontextprotocol/python-sdk/models |
|
Security and quality
| https://github.com/modelcontextprotocol/python-sdk/security |
|
Insights
| https://github.com/modelcontextprotocol/python-sdk/pulse |
| Sign up for GitHub
| https://github.com/signup?return_to=%2Fmodelcontextprotocol%2Fpython-sdk%2Fissues%2Fnew%2Fchoose |
| terms of service | https://docs.github.com/terms |
| privacy statement | https://docs.github.com/privacy |
| Sign in | https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fpython-sdk%2Fissues%2Fnew%2Fchoose |
| Kludex | https://github.com/Kludex |
| main | https://github.com/modelcontextprotocol/python-sdk/tree/main |
| worktree-synthetic-stirring-treehouse | https://github.com/modelcontextprotocol/python-sdk/tree/worktree-synthetic-stirring-treehouse |
|
Conversation
29
| https://github.com/modelcontextprotocol/python-sdk/pull/2988 |
|
Commits
14
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits |
|
Checks
35
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/checks |
|
Files changed
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
|
Support RFC 8693 token exchange for enterprise IdP flows (SEP-990)
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#top |
|
Show all changes
14 commits
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
|
e8df714
Support RFC 8693 token exchange for enterprise IdP flows (SEP-990)
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/e8df714fce8e8ca79a84743a95ee26e312301dca |
|
92fae82
Preserve empty issuer/resource paths on AuthSettings
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/92fae82469b6fce2f7c669c69a186256a9df8d70 |
|
2c7cb17
Merge branch 'auth-settings-preserve-empty-path' into worktree-synthe…
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/2c7cb171f3236daf748159b7b635dd5b67702c12 |
|
c7cacf0
Merge remote-tracking branch 'origin/main' into worktree-synthetic-st…
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/c7cacf09000873639409ea3370ff8d7afe9d4a26 |
|
55c2413
Add end-to-end interaction tests for token exchange (SEP-990)
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/55c2413616f38abeec317d2766341a7914ecbf37 |
|
b94851b
Strengthen token-exchange interaction tests per review
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/b94851b01b8f0c22841419fb53d253a5334c80ec |
|
7783020
Use the RFC 7523 jwt-bearer grant for the SEP-990 ID-JAG leg
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/7783020b615ade0c1083fc891e9d8a800382a063 |
|
0f4052c
Harden the identity-assertion grant per review
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/0f4052cc69db3507a3b64785672d7734a88c9023 |
|
05f60ce
Pin identity-assertion discovery to the expected authorization server
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/05f60ce32e083d08b76dc52ef072eca7016eb8ec |
|
6689e0a
Don't broaden initial identity-assertion scope; normalize origin ports
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/6689e0a6c32cef804c7a37ff43f30f561e3d9fb8 |
|
4393b4b
Always send the configured scope on identity-assertion exchanges
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/4393b4b70792399bc0dde0515b169a57237998ba |
|
d011d3a
Merge remote-tracking branch 'origin/main' into worktree-synthetic-st…
Kludex Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/d011d3af67611a4c1a66ea1fdd2c582a5de10f25 |
|
095f189
Make IdentityAssertionOAuthProvider a standalone httpx.Auth
maxisbey Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/095f189bd8761c3b8733606f6b4ad7b9d34066fa |
|
dfd458a
Merge remote-tracking branch 'origin/worktree-synthetic-stirring-tree…
maxisbey Jun 26, 2026
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/commits/dfd458a19b655b781501d1431b5b30c75f1fdfb3 |
|
Clear filters
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
|
migration.md
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-758ba107a728fccfdf0d098b2c06ded59127dd53ea287d630f72fb51040bc72d |
|
identity_assertion_client.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-d9f410e6ec455a5b5eb325f6a53c2a67daf7ffc7376a00ebb1296df6210f74c5 |
|
pyproject.toml
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-2f2c2ebc66808ef1c1dadc6dce98d6f76a1298d9faf81b03d613f14d2137c802 |
|
identity_assertion_server.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-0397cea93a8a93fbe31f10eeaf2cfd71a38d489998709cde9a6688ae264b1ccb |
|
identity_assertion.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-46a914434a87fa6647279942143c579485166d92ba2690db1c704ac88d804a06 |
|
oauth2.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-b7aaf2062da175cea9a532176d6eb78b659eaadb757cc48929f0bafccfdb8d98 |
|
register.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-6643f748c6f203d6b3c55593361c894373aa78f360ebaa4f3b60b445efccc5af |
|
token.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-0bfdf5a468abdd078a0287db095a4ad5ebfcb04ea3e437026cdc8038c137ecab |
|
client_auth.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-24c1b3fd929c3f6acb7f5a09322c15122e44e894b595a6013b0ae6259ad27500 |
|
provider.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-f7e852ad288ea2750460eb8e8ef0d6152216cd97ae505acd5f06146cf866abec |
|
routes.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-6dfb076f1d9772b9a78be06b88bbbae0f92a0108284fcf247f342cd1a88433f2 |
|
settings.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-ed6123a6a50ac222dad0c2887aa3186d37bbc67f7a2105d4a06320638a75fd25 |
|
server.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-b21bf5e21c058ccfddb404c209f2d4288e4f32b121111ffc9d466638631d13e4 |
|
server.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-51d6996c0b80b8a5c42e7071451cb9ed3c91b398facebe99b94aad911059190e |
|
auth.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-01350058961f3196e3373d707e2178962377dc9a85f481ade94e8f05e4701c8d |
|
test_identity_assertion.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-5d6fc6f0686a5ecd96f4c48fe2790affe1b26dcae8dd2890463e821af12e087b |
|
test_auth.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-f083d075f463e8b1ecfa6b931c33288c3d09b00ee3af3e5f74df16b7e75c3ab1 |
|
_requirements.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-c12ce54cbf13a11daa3f93343e5df8c89ca2b25d0f20f00b5408a2402a223228 |
|
_harness.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-4ac9813efeab1673bfd09096e1374c2d00a185f7948b812eefeb565db6c23247 |
|
_provider.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-035114ed068ee8041a853e4fdb196c4093d0f72f9aa188b86f619673b08c099d |
|
test_identity_assertion.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-45eeab51f7a559c6914bd54bd701d822e585044675b6dd84ff409bff4df3f154 |
|
test_identity_assertion.py
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-6bf132fd3c9502c3bede4a04ea3530ce375e870cee00428c7afb6eb8693e239f |
| docs/migration.md | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-758ba107a728fccfdf0d098b2c06ded59127dd53ea287d630f72fb51040bc72d |
|
View file
| https://github.com/modelcontextprotocol/python-sdk/blob/dfd458a19b655b781501d1431b5b30c75f1fdfb3/docs/migration.md |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/{{ revealButtonHref }} |
|
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-758ba107a728fccfdf0d098b2c06ded59127dd53ea287d630f72fb51040bc72d |
|
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-758ba107a728fccfdf0d098b2c06ded59127dd53ea287d630f72fb51040bc72d |
| examples/snippets/clients/identity_assertion_client.py | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-d9f410e6ec455a5b5eb325f6a53c2a67daf7ffc7376a00ebb1296df6210f74c5 |
|
View file
| https://github.com/modelcontextprotocol/python-sdk/blob/dfd458a19b655b781501d1431b5b30c75f1fdfb3/examples/snippets/clients/identity_assertion_client.py |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/{{ revealButtonHref }} |
| examples/snippets/pyproject.toml | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-2f2c2ebc66808ef1c1dadc6dce98d6f76a1298d9faf81b03d613f14d2137c802 |
|
View file
| https://github.com/modelcontextprotocol/python-sdk/blob/dfd458a19b655b781501d1431b5b30c75f1fdfb3/examples/snippets/pyproject.toml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/{{ revealButtonHref }} |
|
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-2f2c2ebc66808ef1c1dadc6dce98d6f76a1298d9faf81b03d613f14d2137c802 |
| examples/snippets/servers/identity_assertion_server.py | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files#diff-0397cea93a8a93fbe31f10eeaf2cfd71a38d489998709cde9a6688ae264b1ccb |
|
View file
| https://github.com/modelcontextprotocol/python-sdk/blob/dfd458a19b655b781501d1431b5b30c75f1fdfb3/examples/snippets/servers/identity_assertion_server.py |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/modelcontextprotocol/python-sdk/pull/2988/{{ revealButtonHref }} |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
| Please reload this page | https://github.com/modelcontextprotocol/python-sdk/pull/2988/files |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |