[DOCS] MCP docs missing Client ID Metadata Document (CIMD / SEP-991) OAuth support
Documentation Type
Missing documentation (feature not documented)
Documentation Location
https://code.claude.com/docs/en/mcp
Section/Topic
"Authenticate with remote MCP servers" section
Current Documentation
The MCP OAuth documentation describes two client setup paths:
- Dynamic Client Registration (automatic) — the default path where Claude Code registers itself as an OAuth client automatically
- Pre-configured credentials (manual) — using
--client-idand--client-secretfor servers that don't support Dynamic Client Registration
The docs also cover --callback-port for fixed redirect URIs and authServerMetadataUrl for overriding OAuth metadata discovery.
Neither "CIMD", "SEP-991", nor "Client ID Metadata Document" appear anywhere in either the code.claude.com or platform.claude.com docs.
What's Wrong or Missing?
Changelog v2.1.81: "Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration."
CIMD is a third OAuth client-setup mechanism that sits between the two currently documented paths:
- Dynamic Client Registration: fully automatic
- CIMD (new): server publishes client metadata at a well-known URL, allowing Claude Code to discover pre-configured client credentials without DCR
- Pre-configured credentials: fully manual
This intermediate path is entirely absent from the documentation. Server operators who publish CIMD endpoints, and users connecting to such servers, have no guidance.
Suggested Improvement
Add a new subsection to the "Authenticate with remote MCP servers" section in the MCP docs, between the Dynamic Client Registration and pre-configured credentials sections:
## Client ID Metadata Document (CIMD) For MCP servers that don't support Dynamic Client Registration but publish a Client ID Metadata Document (per SEP-991), Claude Code can discover pre-configured client credentials automatically. This is the recommended approach for server operators who want to provide a seamless OAuth experience without supporting full Dynamic Client Registration. Claude Code checks for a CIMD at the standard well-known URL before falling back to manual credential configuration.
Impact
High - Prevents users from using a feature
Additional Context
Affected Pages:
| Page | Context |
|------|---------|
| https://code.claude.com/docs/en/mcp | "Authenticate with remote MCP servers" section (line ~628) |
Total scope: 1 page affected
Source: Changelog v2.1.81 — "Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration"
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗