Procedure

1. In the Admin Console, go to Applications and Resources > MCP Servers.
2. Click Add MCP Server.
   The Add MCP Server page opens.
3. Enter a name, description, and base URL for the MCP server.
   Note:

   You can't change the base URL after you configure the MCP server. To use a different URL, delete the MCP server entry and create a new one.

4. Click Next.
5. Add an authorization server.

   Authorization server details are automatically populated when available through metadata discovery.

   1. Enter an Issuer.
   2. Enter an Authorization endpoint URL.
   3. Enter a Token endpoint URL.
6. To add more authorization servers, click Add another authorization server and repeat the previous step.
7. Click Next.
8. Add credentials for the MCP server.
   1. Enter a Client credentials name.
   2. Select a client registration type.
   3. If you select Manual, enter your Client ID and Client secret.

      You must configure the client as a confidential client using the authorization code flow, which requires a client ID and client secret.

   4. If you select Dynamic Client Registration, Okta registers a client with the provider and populates the credentials.

      You can't switch to another registration type afterward.

   5. Select or add scopes. Scopes are automatically populated when available through metadata discovery.
   6. Click Add to add more scopes.
   7. Click Save.
9. If you have Agent Gateway enabled, click Test credentials and discover tools to validate your credentials and view available tools.
10. To create more client credentials sets, click Add and repeat the previous steps.
11. Click Done and close.

    The MCP server appears on the MCP Servers page and can have one of the following statuses:

    • ACTIVE: The default status for newly added MCP servers.
    • INACTIVE: An admin has deactivated the MCP server and you can't use it for managed connections.
    • INVALID: The MCP server is missing authorization server information or contains corrupted metadata.