Skip to content

Remote MCP Server authentication does not work with Entra due to lack of scope support #5480

Closed

Description

@Arthur742Ramos

What version of Codex is running?

0.47.0

What subscription do you have?

chatgpt plus

Which model were you using?

gpt-5-codex

What platform is your computer?

Microsoft Windows NT 10.0.26100.0 x64

What issue are you seeing?

When trying to authenticate to a Remote MCP server using an Entra Client, it always fails with AADSTS900144 due to a lack of scopes

What steps can reproduce the bug?

Try to authenticate the remote MCP server using an Entra Client

What is the expected behavior?

The user should be able to pass a scope in config.toml. For example, [mcp_servers.x] could receive an oauth_scopes that is a vector of strings that should be requested in the token. I tested this approach locally and it works.

Additional information

No response

Activity

  1. added
    enhancementNew feature or request
    mcpIssues related to the use of model context protocol (MCP) servers
    on Oct 22, 2025
  2. self-assigned this
    on Oct 22, 2025
  3. added a commit that references this issue on Oct 22, 2025
    34c5a9e
  4. added a commit that references this issue on Oct 28, 2025
    22d6ee7
  5. added a commit that references this issue on Nov 10, 2025
    85eac37
  6. added a commit that references this issue on Nov 14, 2025
    a61caa8
  7. added a commit that references this issue on Dec 2, 2025
    5093e92
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingenhancementNew feature or requestmcpIssues related to the use of model context protocol (MCP) servers

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions