Auth for MCP

Access management for AI agents

Claude, ChatGPT and other agents connect on your users' behalf. Authgear handles the sign-in and consent, and issues a token scoped to your server. Self-host it, or let us run a private cloud for you.

Read the guide

How it works

Three steps. The agent never sees your user's password.

1AI agent

The AI agent asks to connect

A user adds your MCP server to Claude, ChatGPT or another AI agent.

asks to connect
2Authgear

The user signs in and grants permissions

Authgear shows your login page and asks the user what the agent may do.

issues a token
3Your MCP server

Your server lets the agent in

The agent gets a token that only works on your server. Your server checks it on every request.

Read the technical explainer: OAuth 2.1 in MCP

Why teams use Authgear for MCP

No client registration
Agents identify themselves with CIMD or DCR, the two methods the MCP spec defines. You never create an app for each agent.
Tokens that only work on your server
Each token names your MCP server as its audience. Your server rejects tokens issued for anything else.
Users stay in control
Users approve each agent on a consent screen, and can see and revoke every agent they've allowed from their account settings.
Run it where your data lives
Self-host Authgear, or let us run a private cloud for you in the region you choose.
On every plan, and open source
MCP support is included on the free plan, every paid plan, and the open-source build.
No extra charge for agents
An agent acting for a user doesn't count as an extra monthly active user.

Works with the AI tools your users already use

  • Claude
  • Claude Code
  • ChatGPT
  • Codex
  • Cursor
  • VS Code
Full setup guide

Frequently asked questions

Do I need CIMD or DCR?

Turn on both. CIMD is the method the MCP spec now recommends: the agent's ID is a URL pointing to a document the agent hosts. With DCR, the agent registers itself, and some clients still rely on it. Authgear supports both, so every agent can connect.

Which AI agents work with it?

Any client that follows the MCP authorization spec, including Claude, Claude Code, ChatGPT, Codex, Cursor and VS Code.

Is it on the free plan? Is it in the open-source version?

Yes to both. MCP support is included on every Authgear plan, including free, and in the open-source build you can self-host.

How are agents billed?

They aren't billed separately. An agent acting for a user doesn't count as an extra monthly active user.

Can I use it with my existing users?

Yes. If your users already sign in with Authgear, agents use the same accounts, login page and roles. Register your MCP server as an API resource and turn on AI agent access.

Add sign-in to your MCP server

Free to start. Open source. No extra charge for agents.