diff --git a/.changeset/skip-offline-access-consent-prompt.md b/.changeset/skip-offline-access-consent-prompt.md index 268cf233ef..5fb7c0cda6 100644 --- a/.changeset/skip-offline-access-consent-prompt.md +++ b/.changeset/skip-offline-access-consent-prompt.md @@ -1,5 +1,5 @@ --- -'@modelcontextprotocol/client': patch +'@modelcontextprotocol/client': minor --- Add `OAuthClientProvider.skipOfflineAccessConsentPrompt` (and the matching `startAuthorization()` option) so a client can omit the `prompt=consent` the SDK adds when the requested scope includes `offline_access`. Default behavior is unchanged. This unblocks authorization servers such as Microsoft Entra ID tenants that have user consent disabled and admin consent granted, where a forced consent prompt fails with `AADSTS90095` for non-admin users.