MCP authentication: what issuer checks change for identity teams

TL;DR: MCP authentication for HTTP transports now depends on OAuth 2.1, protected resource metadata, PKCE, audience validation and issuer checks, while a September 2026 SDK flaw let a malicious server steer the flow and expose client secrets and auth codes, according to NeuralTrust. The core issue is not just token issuance but whether clients can trust discovery metadata at all.

Editorial analysis by NHI Mgmt Group, based on content published by NeuralTrust: “MCP Authentication: OAuth Security Guide”.

Key questions

Q: What breaks when MCP clients trust discovery metadata too early?

A: When a client trusts discovery metadata before validating issuer identity, a malicious server can redirect the OAuth flow to an attacker-controlled token endpoint.

Q: Why do MCP servers need a separate downstream token instead of forwarding the client token?

A: Forwarding the client token creates token passthrough, which lets one credential stand in for multiple trust relationships and destroys the audit trail.

Q: When should teams use environment credentials for local MCP servers?

A: Use environment credentials only for local stdio servers that are intentionally scoped to one process or one user context.

Practitioner guidance

• Validate issuer binding in every MCP client Reject any authorization server metadata whose issuer does not exactly match the server it was fetched for, and clear stored registrations after updating affected clients.
• Bind each token to a single audience Require the canonical resource URI in the audience claim and fail closed when a token was not issued for the MCP server being called.
• Eliminate token passthrough in brokered flows Force MCP servers to obtain separate downstream tokens for upstream APIs so that the client token never crosses service boundaries.

Bottom line: MCP authentication is only as strong as the client’s ability to validate discovery metadata before it accepts an authorization path.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →