Skip to main content
MCP Auth lets your application authorize end users to access external MCP servers, such as Notion MCP, Linear MCP, or HubSpot MCP, so you can call those servers’ tools on behalf of each user. Nango handles OAuth with the MCP provider and stores the tokens. You can then use the connection to call the MCP server via Nango’s proxy.

​
Two ways to use MCP Auth

If you are missing a catalog MCP server you can request it.

​
How to use it

​
Catalog MCP servers

  1. Create the integration
    In the Nango UI: Integrations → Configure New Integration → choose the MCP provider (e.g. HubSpot (MCP), Notion MCP).
    Some providers, for example HubSpot MCP, require you to register an MCP auth app and add Client ID and Client Secret in Nango. But most support dynamic client registrations: You can just enable them on Nango, and Nango registers a client for you in the background.
  2. Run the same auth flow as standard OAuth
  3. Call the MCP server
    Use the stored connection_id and integration id (e.g. hubspot-mcp) with the Proxy API (JSON-RPC tools/call, etc.).

​
Generic MCP Server OAuth2

  1. Create a generic MCP integration
    Integrations → Configure New Integration → MCP Server OAuth2 (Generic). Optionally set OAuth Client Name, URI, and Logo URI (used in dynamic client registration with the MCP server).
  2. Same Connect session + Connect UI flow
    As above: backend creates a session with allowed_integrations: ['mcp-generic'] (or your custom integration id), frontend opens Connect UI with that token, backend stores the connection ID.
  3. End user supplies the MCP server URL
    When the user starts the connection, the Connect UI prompts for MCP Server URL (e.g. https://mcp.notion.com/mcp). Nango automatically discovers the OAuth endpoints from the server and walks the user through the OAuth connection flow.
  4. Call the MCP server
    Same as pre-built: use the connection with the Proxy API. The connection is tied to the MCP server URL the user entered.
Our generic MCP provider currently only works with MCP servers that support automatic client registration (DCR, or CIMD).

​
End user experience

  • Catalog MCP servers
    User sees a list of supported MCP servers in your app → clicks connect → is redirected to the provider’s OAuth page (e.g. HubSpot or Notion) → signs in and approves → connection is created in Nango
  • MCP Generic
    User clicks connect → sees a form asking for the MCP Server URL → submits → is redirected to that MCP server’s OAuth page → signs in and approves → connection is created in Nango
In both cases, your app only needs to open the Connect UI and pass the session token. Nango handles the rest.