From b4eedc8ab7d8000d6da809028cea636eba079255 Mon Sep 17 00:00:00 2001 From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com> Date: Thu, 9 Apr 2026 00:43:50 +0000 Subject: [PATCH] docs: add MCP client credentials section Generated-By: mintlify-agent --- ai/model-context-protocol.mdx | 42 +++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/ai/model-context-protocol.mdx b/ai/model-context-protocol.mdx index ec93468d2..fe45930f2 100644 --- a/ai/model-context-protocol.mdx +++ b/ai/model-context-protocol.mdx @@ -104,6 +104,48 @@ By default, your MCP server is only available for localhost tools. To allow web- +### Client credentials + +Client credentials enable programmatic, machine-to-machine access to your authenticated MCP server without interactive login. Use client credentials when you need automated systems, CI/CD pipelines, or backend services to access your MCP server. + +With client credentials, your application authenticates using a client ID and client secret instead of going through the interactive OAuth flow. The token endpoint issues an access token scoped to `mcp:search`. + + + + 1. Navigate to the [MCP server page](https://dashboard.mintlify.com/products/mcp) in your dashboard. + 2. In the **Client credentials** section, click **Generate credentials**. + 3. Enter a label to identify the credential, such as `Production server`. + 4. Click **Generate**. + 5. Copy and securely store the client ID and client secret. The secret is only shown once. + + + Exchange your client credentials for an access token by making a `POST` request to your MCP server's token endpoint. Pass your credentials using `client_secret_post` (form body) or HTTP Basic authentication (`Authorization: Basic`). + + ```bash + curl -X POST https:///mcp/oauth/token \ + -d grant_type=client_credentials \ + -d client_id= \ + -d client_secret= + ``` + + A successful response returns a bearer token: + + ```json + { + "access_token": "", + "token_type": "Bearer", + "expires_in": 1209600, + "scope": "mcp:search" + } + ``` + + + Use the access token to authenticate requests to your MCP server. Pass the token in the `Authorization` header when connecting. + + + +To delete a client credential, navigate to the [MCP server page](https://dashboard.mintlify.com/products/mcp) in your dashboard and click the delete icon next to the credential you want to remove. Deleted credentials are immediately revoked. + ### Rate limits To protect availability, Mintlify applies rate limits to MCP servers.