Tools
MCP Inspector was labelling CIMD logins as Dynamic Client Registration even though no registration request ever happened
modelcontextprotocol/inspector#2287 (merged 2026-09-07T12:11Z, 7 files, +871/-48) fixes Connection Info showing 'Dynamic (DCR)' for a Client ID Metadata Document login. `BaseOAuthClientProvider.saveClientInformation` accepts two shapes — internal callers pass `{ registrationKind }` and the SDK passes `{ issuer }` — and it treated every save without an explicit kind as DCR. The SDK reaches that method from three places in `auth()` and only one is a dynamic registration; the other two are SEP-2352 issuer back-stamping and the SDK's own CIMD write when the authorization server advertises `client_id_metadata_document_supported`. The Client ID shown was always correct; only the provenance was wrong.
Source
↳ Follow the thread