MCP authorization
In short: MCP authorization is the part of the Model Context Protocol that defines how a client proves it may call an MCP server. It builds on OAuth 2.1 with PKCE and client metadata. Extensions such as Enterprise-Managed Authorization let a company's identity provider control access.
Where does it show up in practice?
Descope names MCP authorization among the standards it supports.