// Error · Connect tools to agents (MCP, CLI, auth)
Remote MCP server OAuth fails
Remote (HTTP) MCP servers usually use OAuth. Failures mostly come from a client that does not support the flow, a redirect URI mismatch, or an expired token that was not refreshed.
verified 2026-10-102 official sources
Scenario: Connect tools to agents (MCP, CLI, auth) →
Symptoms
- The authorization page fails to open or shows a redirect_uri error
- Tool calls return 401 some time after a successful login
Common causes
- The client version does not support OAuth or dynamic client registration (DCR) for remote MCP
- The redirect URI registered with the provider differs from the one the client uses
- The token expired and the client did not refresh it
- The requested scopes are insufficient
How to fix
- Check that the client’s docs say it supports remote MCP authorization; if not, use the provider’s personal access token (PAT) option
- Connect MCP Inspector to the same remote URL and run the flow on its own to tell server problems from client problems
- Verify the redirect URI registered with the provider
- Clear the server’s stored authorization in the client and sign in again
- Request only the minimum scopes the task needs
Notes
- Treat tokens like passwords and keep them out of repositories
Official references
Compiled from official documentation and public discussions on 2026-10-10; not yet reproduced in our own environment. Follow the official docs if they differ.