Skip to content

Remote MCP Server authentication does not work with Entra due to lack of scope support #5480

@Arthur742Ramos

Description

@Arthur742Ramos

What version of Codex is running?

0.47.0

What subscription do you have?

chatgpt plus

Which model were you using?

gpt-5-codex

What platform is your computer?

Microsoft Windows NT 10.0.26100.0 x64

What issue are you seeing?

When trying to authenticate to a Remote MCP server using an Entra Client, it always fails with AADSTS900144 due to a lack of scopes

What steps can reproduce the bug?

Try to authenticate the remote MCP server using an Entra Client

What is the expected behavior?

The user should be able to pass a scope in config.toml. For example, [mcp_servers.x] could receive an oauth_scopes that is a vector of strings that should be requested in the token. I tested this approach locally and it works.

Additional information

No response

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingenhancementNew feature or requestmcpIssues related to the use of model context protocol (MCP) servers

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions