diff --git a/docs/servers/auth/oauth-proxy.mdx b/docs/servers/auth/oauth-proxy.mdx index 19f5c2cee..73c65b091 100644 --- a/docs/servers/auth/oauth-proxy.mdx +++ b/docs/servers/auth/oauth-proxy.mdx @@ -165,6 +165,14 @@ mcp = FastMCP(name="My Server", auth=auth) provider doesn't support PKCE + + Whether to forward RFC 8707 `resource` parameters from MCP clients to the + upstream OAuth provider. When enabled, the proxy includes the resource indicator + in authorization requests, allowing providers that support RFC 8707 to scope + tokens to specific resources. Disable for providers that reject unknown + parameters. + + Token endpoint authentication method for the upstream OAuth server. Controls how the proxy authenticates when exchanging authorization codes and refresh @@ -386,7 +394,7 @@ auth = OAuthProxy( ) ``` -The proxy also automatically forwards RFC 8707 `resource` parameters from MCP clients to upstream providers that support them. +The proxy also forwards RFC 8707 `resource` parameters from MCP clients to upstream providers that support them. This is enabled by default via the `forward_resource` parameter. Disable it for providers that reject unknown parameters. ## OAuth Flow