Auth0: MCP vendor profile
Auth0's Auth for MCP acts as the OAuth 2.1 authorization server for remote MCP servers, with CIMD and DCR client registration, on-behalf-of token exchange and Token Vault for third-party APIs, as documented by the vendor. Auth0 can put enterprise SSO in front of MCP servers through Okta, Entra ID, Ping and Google Workspace connections (auth0.com).
At a glance
| Listed as | Auth0 (Auth for MCP) |
|---|---|
| Type | Auth providers |
| Operator | Okta |
| Home | auth0.com |
| Price | per monthly active user, AI Agents add-on |
| Read | 5 November 2026 |
What it does for this layer
Auth0 announced general availability of Auth for MCP on 6 May 2026 (auth0.com). In Auth0, a tenant admin registers an MCP client by giving its Client ID Metadata Document URL; Auth0 fetches and validates the metadata and shows it to the admin before creating the client (auth0.com). An Auth0 tenant serves an OAuth 2.0 Authorization Server Metadata document at /.well-known/oauth-authorization-server, and Auth0 lists Dynamic Client Registration as a step that can follow the metadata response (auth0.com).
Auth0 Token Vault manages issuance, storage, rotation and revocation of tokens for third-party APIs such as Google, Microsoft, Jira and Notion that an MCP server calls (auth0.com). The Auth for MCP guides include a Resource Parameter Compatibility Profile, an MCP Inspector test guide and a Cloudflare MCP guide (auth0.com). Auth0 pricing lists a Free plan at 0 USD up to 25,000 monthly active users, Essentials from 35 USD a month (B2C) or 150 USD (B2B), and Professional from 240 USD (B2C) or 800 USD (B2B) (auth0.com).
Auth0 for AI Agents is sold as a paid add-on priced by monthly active users; the B2C add-on includes unlimited Token Vault (auth0.com). Auth0 describes Auth for MCP as implementing "the authorization parts of the MCP spec with OAuth 2.1 and OpenID Connect" (auth0.com). Auth0 supports On-Behalf-Of token exchange so an MCP server can trade the user's token for a short-lived token scoped to an internal API (auth0.com).
Products and plans
| Product | What it does | Price |
|---|---|---|
| Auth for MCP | Authorization server, client registration, token exchange and Token Vault for MCP servers. | per monthly active user, AI Agents add-on; from 0 USD; Free plan up to 25,000 MAUs; AI Agents add-on priced by MAU tier (source, as of 5 November 2026) |
Standards
| Standard | Part of it | Status | What the page says | Source |
|---|---|---|---|---|
| MCP | authorization server metadata | Supports | Tenant serves /.well-known/oauth-authorization-server for MCP clients. | auth0.com |
| MCP | client ID metadata documents | Supports | GA release adds admin-confirmed CIMD client registration. | auth0.com |
| MCP | dynamic client registration | Supports | DCR can follow the metadata response. | auth0.com |
| MCP | resource parameter | Partial | Auth0 publishes a Resource Parameter Compatibility Profile guide rather than a plain statement of RFC 8707 support. | auth0.com |
Checks on its own domain
| Check | Domain | Result | Scanned | Method |
|---|---|---|---|---|
| Ora cached score | auth0.com | 74 of 100, grade B | 5 November 2026 | how it was taken |
| Cloudflare agent-readiness scan | auth0.com | 27 of 100, L1 Basic Web Presence; 4 of 15 counted checks passed | 5 November 2026 | how it was taken |
What it does not do
- Auth0 does not host the MCP server; the server validates Auth0 tokens itself.
Relation to Ora
Auth0 sits on the AgentReady.org committee for auth, which Ora's launch post of 19 October 2026 describes as how agents sign in and act on a user's behalf (ora.ai, read 5 November 2026).