MCP Authentication

OAuth 2.1 + PKCE

Claude Desktop and ChatGPT use OAuth 2.1 with PKCE. The MCP gateway handles metadata discovery (.well-known/oauth-authorization-server) and consent automatically.

Bearer token

Claude Code, Cursor, and other token-capable clients configure a Bearer token directly:

{
  "mcpServers": {
    "portfolio-intel": {
      "url": "https://api.portfoliointel.co.in/mcp",
      "headers": { "Authorization": "Bearer sk_live_..." }
    }
  }
}

Scopes

Scope	Required for
parse	parse_cas, run_skill
read	list_skills, snapshot retrieval

Generate a scoped key in the developer dashboard.