Remote MCP Server authentication does not work with Entra due to lack of scope support
Resolved 💬 0 comments Opened Oct 22, 2025 by Arthur742Ramos Closed Oct 22, 2025
What version of Codex is running?
0.47.0
What subscription do you have?
chatgpt plus
Which model were you using?
gpt-5-codex
What platform is your computer?
Microsoft Windows NT 10.0.26100.0 x64
What issue are you seeing?
When trying to authenticate to a Remote MCP server using an Entra Client, it always fails with AADSTS900144 due to a lack of scopes
What steps can reproduce the bug?
Try to authenticate the remote MCP server using an Entra Client
What is the expected behavior?
The user should be able to pass a scope in config.toml. For example, [mcp_servers.x] could receive an oauth_scopes that is a vector of strings that should be requested in the token. I tested this approach locally and it works.
Additional information
_No response_