Skip to content

Fleet: document OAuth 2.0 client credentials for remote MCP servers - #6733

Open
naresh-nampelly wants to merge 6 commits into
mainfrom
naresh/fleet-mcp-client-credentials
Open

naresh-nampelly wants to merge 6 commits into
mainfrom
naresh/fleet-mcp-client-credentials

Conversation

@naresh-nampelly

Copy link
Copy Markdown
Contributor

Adds the OAuth 2.0 client credentials option to the Authentication types list on the Fleet remote MCP servers page, with the self-hosted version and feature flag. Shipped in HEA-58 (SaaS) and HEA-59 (self-hosted backport, app 0.17.32). Customer request PS-149, Pylon #31955.

@github-actions

Copy link
Copy Markdown
Contributor

Thanks for opening a docs PR, naresh-nampelly! When it's ready for review, please add the relevant reviewers:

  • @npentrel or @lnhsingh (LangSmith Fleet)

@github-actions github-actions Bot added langsmith For docs changes to LangSmith internal labels Oct 15, 2026
Comment thread src/langsmith/fleet/remote-mcp-servers.mdx Outdated
Client credentials is a provider grant type under OAuth 2.1 (Manual),
not a separate auth type. Add the Register an OAuth provider section
from #4922 covering both grants, correct UI labels against
smith-frontend, scope the self-hosted flag note to v0.17, and rename
Headers to Static Headers to match the form.
@lnhsingh

Lauren Hirata Singh (lnhsingh) commented Oct 15, 2026 •

Copy link
Copy Markdown
Collaborator

Pushed 0344d3a, which folds in #4922 and corrects the page against smith-frontend main:

  • Client credentials is now a grant type under OAuth 2.1 (Manual), not a separate auth type. The form has no separate option since langchainplus#46693.
  • Added a Register an OAuth provider section from docs(fleet): document registering an OAuth provider for manual MCP OAuth #4922 that covers both grants: the redirect URL, the fields, PKCE, and the workspaces:manage permission.
  • Matched the UI labels: OAuth Provider button, Client Credentials grant, Token Authentication (HTTP Basic / Request body), Scope and Audience under Advanced, and Static Headers.
  • Fixed the token behavior: host-backend mints a fresh token per call (auth.py); it does not refresh.
  • Scoped the self-hosted note to v0.17 and named the real Helm paths (hostBackend.deployment.extraEnv, platformBackend.deployment.extraEnv).

Written with Claude Code.

@lnhsingh

Copy link
Copy Markdown
Collaborator

naresh-nampelly, one open question: does 0.18 still need FF_FLEET_OAUTH_CLIENT_CREDENTIALS_ENABLED? The flag exists only on v17-stable, so I assumed 0.18 enables the feature by default. If that's wrong, please widen the note.

Feel free to merge when ready!

Co-authored-by: lnhsingh <15386648+lnhsingh@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Mintlify preview branch generated: preview-naresh-1792099899-0d70a60

Site preview: https://langchain-5e9cc07a-preview-naresh-1792099899-0d70a60.mintlify.site

Important

Preview links may take a few minutes to start working while the deployment finishes.

Changed documentation pages (preview deep links):

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci internal langsmith For docs changes to LangSmith

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants