MCP Auth Explained: Every Method, Direct and Through a Proxy
blog.dwornikowski.comEnjoying this so far.
> The MCP authorization spec is written entirely around user-delegated flows and does not define a machine-to-machine grant at all.
is slightly wrong. There's a blessed extension: https://modelcontextprotocol.io/extensions/auth/oauth-client...
Yeah, other than that one thing, this was a great intro to MCP auth.
Thanks !
Thanks for this - I will update the post.