The authorization server URL of the target MCP server (used as audience in the token exchange request).
The client ID registered with the IdP for token exchange.
OptionalclientThe client secret for authenticating with the IdP.
Optional: the IdP may register the MCP client as a public client. RFC 8693 does
not mandate confidential clients for token exchange. Omitting this parameter
omits client_secret from the request body.
OptionalfetchCustom fetch implementation. Defaults to global fetch.
The IdP's issuer URL for OAuth metadata discovery.
Will be used to discover the token endpoint via .well-known/oauth-authorization-server.
The identity assertion (ID Token) from the enterprise IdP. This should be the OpenID Connect ID Token obtained during user authentication.
The resource identifier of the target MCP server (RFC 9728).
OptionalscopeOptional space-separated list of scopes to request for the target MCP server.
Options for discovering the IdP's token endpoint and requesting a JWT Authorization Grant. Extends
RequestJwtAuthGrantOptionswith IdP discovery.