How Does OAuth Client Work?

OAuth Client lets AI clients that speak OAuth 2.0 — like ChatGPT — authenticate to your MCP server through a proper authorization flow instead of a static key. Arthur publishes the protected-resource and authorization-server metadata the client needs to discover automatically, and rejects unauthorized requests with a standard WWW-Authenticate challenge pointing at that metadata.

Open the Arthur screen that visually supports “How Does OAuth Client Work?”

There are three modes: Disabled, Arthur-managed (Arthur runs the OAuth server for you), and External (you point it at your own OAuth/OIDC provider). The AI client never sees your Arthur password — it authenticates through whichever provider is actually configured.

Open the Connect tab to show the product area discussed by this wiki page

Learn more: How to Connect ChatGPT via OAuth.

Bring the OAuth Client area into the viewport for a focused, semantic screenshot

Tutorial video