Skip to content

Document MCP authentication controls #4174

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mintlify-development wants to merge 1 commit into from
Closed

Document MCP authentication controls #4174

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions ai/model-context-protocol.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,6 +60,26 @@
Hosted MCP servers use the `/mcp` path in their URLs. Other navigation elements cannot use the `/mcp` path.
</Note>

### MCP with authenticated documentation

When your documentation uses [authentication](/deploy/authentication-setup), you have additional controls for your MCP server.

#### Enable or disable your MCP server

If your documentation has authentication enabled, you can toggle your MCP server on or off from the [MCP server page](https://dashboard.mintlify.com/products/mcp) in your dashboard. When disabled, AI applications cannot connect to your documentation through MCP.

#### Configure allowed redirect domains

When authentication is enabled, your MCP server uses OAuth to authenticate AI applications. You can restrict which domains can receive OAuth callbacks by configuring allowed redirect domains.

Check warning on line 73 in ai/model-context-protocol.mdx

View check run for this annotation

Mintlify / Mintlify Validation (mintlify) - vale-spellcheck

ai/model-context-protocol.mdx#L73 

In general, use active voice instead of passive voice ('is enabled').

To configure redirect domains:

1. Navigate to the [MCP server page](https://dashboard.mintlify.com/products/mcp) in your dashboard.
2. In the **Redirect domains** section, enter a domain (for example, `example.com`).
3. Click **Add domain**.

Only OAuth callbacks to the configured domains are allowed. This prevents unauthorized applications from completing the OAuth flow with your MCP server.

Check warning on line 81 in ai/model-context-protocol.mdx

View check run for this annotation

Mintlify / Mintlify Validation (mintlify) - vale-spellcheck

ai/model-context-protocol.mdx#L81 

In general, use active voice instead of passive voice ('are allowed').

### Rate limits

To protect availability, Mintlify applies rate limits to MCP servers.
Expand Down