Managing Access to MCP Servers with OCI IAM
Oracle, Friday, October 9th, 2026
OCI IAM adds OAuth-based features for securing MCP servers, including Client ID Metadata Documents and cross-app ID-JAG grants.
Oracle describes new OCI IAM capabilities for Model Context Protocol integrations, in which MCP clients discover a server's Protected Resource Metadata and IAM endpoints and obtain scoped OAuth tokens that the server validates before running a tool.
Client ID Metadata Documents let apps publish OAuth configuration at an HTTPS URL used as the client ID, avoiding per-domain registration under admin allowlists.
Cross-app access uses signed Identity Assertion JWT Authorization Grants, including from external providers like Okta, illustrated with OCI Database Tools MCP.