2026-09-09.0

[fungc-io]

Highlights

Authgear can now be the authorization server for your MCP server.
AI agents and IDE assistants that connect to your MCP server have to sign the user in and get an access token first. Authgear now supports both ways the MCP Authorization spec lets a client identify itself: Dynamic Client Registration (DCR, RFC 7591), where the client registers itself at a /oauth2/register endpoint, and Client ID Metadata Documents (CIMD), where the client hosts a JSON document at an HTTPS URL and uses that URL as its client ID. The user signs in and approves the requested scopes on the consent screen, and Authgear issues an access token bound to your MCP server. No admin has to create an application per client. See Auth for MCP to set it up.

Manage dynamic clients from the Portal.
Client Applications has a new "Dynamic clients (DCR)" tab where you turn registration on, issue and revoke initial access tokens, set token lifetimes, and browse or delete registered clients. Dynamic third-party clients can only call the API resources and scopes you open to them with the new "Allow dynamic third-party clients" setting, so your own apps are unaffected. CIMD is enabled through project configuration in this release; its Portal toggle will follow.

The Portal redesign is complete.
Every remaining admin screen (Users, Roles and Groups, Analytics, Audit Log, authentication settings, API Resources, Hooks, Integrations, Billing and more) has moved to the new design, and the old Fluent UI library is gone. Along the way the Audit Log gains grouped activity filters and date range presets, and Standard Attributes get search.

Other changes

• React Native starter kit added to the framework-first Quick Start
• The consent screen shows the client's logo and hostname for dynamic clients, and no longer shows "null" when a client has no name
• Fixed the OTP screen showing an unknown error after a failed delivery status update
• Fixed the Audit Log custom date range shifting by a day in timezones west of UTC
• Misc bug fixes and security improvements

---

This discussion was created from the release 2026-09-09.0.