yucheng faa430c6c1 feat(mcp): challenge Agent 365 gated MCP servers with the Entra RFC 9728 metadata ... When an Agent 365 guardrail applies to an MCP server that advertises scopes and no bearer arrives, reuse the MCP OBO raise_token_exchange_challenge so the 401 and WWW-Authenticate header leave at the transport layer. The protected-resource metadata for that server names the guardrail's Entra v2 issuer and the server's scopes, so Claude Code and other MCP clients run browser SSO and attach the bearer themselves instead of the user pasting a token into the client config. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-09-11 02:08:09 +00:00
..
mcp_server	feat(mcp): challenge Agent 365 gated MCP servers with the Entra RFC 9728 metadata	2026-09-11 02:08:09 +00:00