Test Dynamic Auth for MCP

[TylerLeonhardt]

Refs: #247759

• macOS @rzhao271
• linux @joshspicer
• windows @benibenj

Complexity: 4

Create Issue

---

We now support MCP servers that are behind auth. This means that you can add an MCP server to VS Code, then be taken through its auth flow. This will let you invoke tools that do stuff on behalf of your user account of that service.

This particular test plan item is about the non-GitHub backed, non-Microsoft backed, MCP servers that use some other kind of auth to auth.

Basic Steps

Basically, all I want you to do is:

1. grab a server from this link (note it must be some with Authentication OAuth 2.1):
   https://github.com/jaw9c/awesome-remote-mcp-servers (thank you @jaw9c for the great resource!)
2. Add them to VS Code using MCP: Add Server... command
3. Start it, it should take you through the flow and authenticate
4. You should see the tools CodeLens update
5. Try using a tool from that server in Agent mode

Then repeat these steps for 1 other MCP server.

I'd really like it if you test distinct MCP servers for wider coverage so if you could write in the issue which ones you will try, that'd be great.

When you sign in, the account information, if any of it is available, will be shown in the Account menu with the other accounts. There, you can sign out.

Additional Steps

Now, there are 3 flows available to cast a wide net of authenticating. There's:

• protocol handler (the browser redirects to vscode://....)
• loopback server (the browser redirects back to http://localhost:XXXX)
• device code flow (you are shown a code to copy and paste into a page)

You can cancel the progress notification and it'll ask you if you wanna sign in a different way and will show you the next possible flow in the above order.

Loopback server

I'd love it if you could at least test the loopback server once... so:

• start the flow
• cancel the progress notification in VS Code shown when you are first taken to your browser,
• say "Yes" when it asks if you wanna try again with Loopback

Device code flow

I doubt the Device Code flow will be supported by any you try... but if you want to see if it works do this:

• Start the flow
• Cancel the progress notification
• Say "Yes"
• Cancel the progress notification again
• If you are given an option to say "Yes" to device code flow, GREAT, do it please. If not, no big deal.

Let me know what you think of the flow!

[benibenj]

Tested Waystation, Wix and Neon. Worked very well, nice job!