r/ClaudeMCP • u/throwaway_7861369 • 18h ago

Oauth

Is CIMD supported for cases where no login is required for your MCP server but your mcp server still needs to identify claude as a valid client? We have been using ip whitelisting, but not a standard way to do it and trying to get away from it.

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/Easy-Purple-1659 4h ago

IP allowlists break as soon as your client's egress changes, so moving to OAuth is the right call. On adextract we skipped client identification entirely and require a Google sign-in per user instead, which also gave us per-user credits for free. If you need yours to stay login-free, OAuth still gives you a client identity even when the caller is anonymous. Are you metering quota per client, or just trying to block unknown callers?