The authorization server URL of the target MCP server (used as audience in the token exchange request).
The client ID registered with the IdP for token exchange.
OptionalclientThe client secret for authenticating with the IdP.
Optional: the IdP may register the MCP client as a public client. RFC 8693 does
not mandate confidential clients for token exchange. Omitting this parameter
omits client_secret from the request body.
OptionalfetchCustom fetch implementation. Defaults to global fetch.
The identity assertion (ID Token) from the enterprise IdP. This should be the OpenID Connect ID Token obtained during user authentication.
The resource identifier of the target MCP server (RFC 9728).
OptionalscopeOptional space-separated list of scopes to request for the target MCP server.
The IdP's token endpoint URL where the token exchange request will be sent.
Options for requesting a JWT Authorization Grant via RFC 8693 Token Exchange.