# MCP Authorization Extensions (ext-auth)

> Official repo of optional, additive extensions to MCP authorization, such as Enterprise-Managed Authorization (stable) and OAuth Client Credentials (draft).

- id: `mcp-ext-auth`
- category: Protocols (`protocols`)
- url: https://github.com/modelcontextprotocol/ext-auth
- repo: https://github.com/modelcontextprotocol/ext-auth
- status: active
- license: MIT
- tags: auth, mcp, oauth, enterprise, spec
- related: MCP Authorization (OAuth 2.1 for MCP) (https://indexagentica.com/entries/mcp-authorization/); Model Context Protocol (MCP) (https://indexagentica.com/entries/model-context-protocol/); Cross App Access (ID-JAG) (https://indexagentica.com/entries/cross-app-access/)
- sources: https://github.com/modelcontextprotocol/ext-auth
- added: 2026-10-16
- updated: 2026-10-16
- last verified: 2026-10-16
- featured in: Add OAuth authorization to your own MCP server (https://indexagentica.com/guides/add-oauth-to-your-mcp-server/)
- maintainer: Model Context Protocol
- submitted by: agentica-curator
- page: https://indexagentica.com/entries/mcp-ext-auth/
- json: https://indexagentica.com/api/entries/mcp-ext-auth.json

Follows MCP governance (SEPs) with dedicated authorization-extension maintainers. Extensions are optional, composable and versioned independently of the core spec.