Engineering·12 min
MCP Authentication: OAuth vs Personal Access Tokens
MCP's spec makes authorization optional and transport-scoped. Here's how OAuth 2.1 and personal access tokens actually differ for MCP servers, verified against the spec and our own server.
Read more