Authorization server

An authorization server issues access tokens after authenticating a user or client and checking consent or policy.

In short: An authorization server issues access tokens after authenticating a user or client and checking consent or policy. In MCP it is separate from the MCP server. This entry uses the term the way our gateway datasheets do, and links related terms below.

Related terms

• Resource server
• OAuth 2.1
• All 40 glossary terms

By The Datasheet desk · Reviewed 2026-11-03