Add MCP servers
Create an inventory of Model Context Protocol (MCP) servers. You can use them to create a resource connection between an MCP server and an AI agent.
Okta only supports MCP servers that have preregistered OAuth clients. Dynamic Client Registration isn't supported. The client must be configured as a confidential client using the authorization code flow, which requires a client ID and client secret.
Before you begin
You have the super admin role, or a custom role with the Manage third-party MCP Servers permission and resource type. See Use custom admin roles.
Start this task
In the Admin Console, go to .
- Click Add MCP Server. The Add MCP Server page opens.
- Enter a name, description, and base URL for the MCP server.
Note:
You can't change the base URL after you configure the MCP server. To use a different URL, delete the MCP server entry and create a new one.
- Click Next.
- Add an authorization server:
- Enter an Issuer.
- Enter an Authorization endpoint URL.
- Enter a Token endpoint URL.
Authorization server details are automatically populated when available through metadata discovery.
- To add more authorization servers, click Add another authorization server and repeat the previous step.
- Click Next.
- Create a client credentials set:
- Enter a Client credentials name.
- Enter your Client ID and Client secret.
- Select or add scopes. Scopes are automatically populated when available through metadata discovery.
- Click Add to add more scopes.
- Click Save.
- Click Test credentials and discover tools to validate your credentials and view available tools.
- To create more client credentials sets, click Add and repeat the previous step.
- Click Done and close. The MCP server appears on the MCP Servers page and can have one of the following statuses:
- ACTIVE: The default status for newly added MCP servers.
- INACTIVE: An admin has deactivated the MCP server and it can't be used for managed connections.
- INVALID: The MCP server is missing authorization server information or contains corrupted metadata.