Skip to content

mcp oauth (experimental) not working with supabase mcp #5254

Closed

Description

@MauScheff

What version of Codex is running?

codex-cli 0.45.0

What subscription do you have?

API

Which model were you using?

gpt-5-codex

What platform is your computer?

Darwin 24.6.0 x86_64 i386

What issue are you seeing?

experimental_use_rmcp_client = true
[mcp_servers.supabase]
url = "https://mcp.supabase.com/mcp?project_ref=xxxxxxxxxx&read_only=true"
❯ codex mcp login supabase
Dynamic registration failed: Registration failed: HTTP 404 Not Found: 
Authorize `supabase` by opening this URL in your browser:
https://mcp.supabase.com/authorize?project_ref=xxxxxxxxx&read_only=true&response_type=code&client_id=mcp-client&state=tshk3Txx-eZzGANecv2EaJZDQ&code_challenge=xxxxxx&code_challenge_method=S256&redirect_uri=http%3A%2F%2F127.0.0.1%3A49387%2Fcallback

I open the link and says not found, supabase provides buttons for vscode that use the same link and it works.

What steps can reproduce the bug?

open a supabase account, create a poject, try to connect via mcp with codex.

What is the expected behavior?

No response

Additional information

No response

Activity

  1. added
    mcpIssues related to the use of model context protocol (MCP) servers
    on Oct 16, 2025
  2. github-actions commented on Oct 16, 2025

    @github-actions
    Contributor

    Potential duplicates detected. Please review them and close your issue if it is a duplicate.

    Powered by Codex Action

  3. MauScheff commented on Oct 16, 2025

    @MauScheff
    Author

    Not a duplicate, but related.

  4. gpeal commented on Oct 17, 2025

    @gpeal
    Contributor

    It looks like supabase uses the following header for oauth discovery:

    www-authenticate: Bearer error="invalid_request", error_description="No access token was provided in this request", resource_metadata="https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
    

    which I'll need to add support for in https://github.com/modelcontextprotocol/rust-sdk. I'll leave this open until I can fix it there and get it merged here.

    https://www.rfc-editor.org/rfc/rfc9728.html#name-use-of-www-authenticate-for

  5. self-assigned this
    on Oct 18, 2025
  6. gpeal commented on Oct 23, 2025

    @gpeal
    Contributor

    Fixed by #5423

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingmcpIssues related to the use of model context protocol (MCP) servers

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions