[DOCS] MCP docs missing Client ID Metadata Document (CIMD / SEP-991) OAuth support

Resolved 💬 3 comments Opened Mar 20, 2026 by coygeek Closed Mar 28, 2026

Documentation Type

Missing documentation (feature not documented)

Documentation Location

https://code.claude.com/docs/en/mcp

Section/Topic

"Authenticate with remote MCP servers" section

Current Documentation

The MCP OAuth documentation describes two client setup paths:

  1. Dynamic Client Registration (automatic) — the default path where Claude Code registers itself as an OAuth client automatically
  2. Pre-configured credentials (manual) — using --client-id and --client-secret for servers that don't support Dynamic Client Registration

The docs also cover --callback-port for fixed redirect URIs and authServerMetadataUrl for overriding OAuth metadata discovery.

Neither "CIMD", "SEP-991", nor "Client ID Metadata Document" appear anywhere in either the code.claude.com or platform.claude.com docs.

What's Wrong or Missing?

Changelog v2.1.81: "Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration."

CIMD is a third OAuth client-setup mechanism that sits between the two currently documented paths:

  • Dynamic Client Registration: fully automatic
  • CIMD (new): server publishes client metadata at a well-known URL, allowing Claude Code to discover pre-configured client credentials without DCR
  • Pre-configured credentials: fully manual

This intermediate path is entirely absent from the documentation. Server operators who publish CIMD endpoints, and users connecting to such servers, have no guidance.

Suggested Improvement

Add a new subsection to the "Authenticate with remote MCP servers" section in the MCP docs, between the Dynamic Client Registration and pre-configured credentials sections:

## Client ID Metadata Document (CIMD) For MCP servers that don't support Dynamic Client Registration but publish a Client ID Metadata Document (per SEP-991), Claude Code can discover pre-configured client credentials automatically. This is the recommended approach for server operators who want to provide a seamless OAuth experience without supporting full Dynamic Client Registration. Claude Code checks for a CIMD at the standard well-known URL before falling back to manual credential configuration.

Impact

High - Prevents users from using a feature

Additional Context

Affected Pages:

| Page | Context |
|------|---------|
| https://code.claude.com/docs/en/mcp | "Authenticate with remote MCP servers" section (line ~628) |

Total scope: 1 page affected

Source: Changelog v2.1.81 — "Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration"

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗