Connecting AI agents to enterprise tools through the Model Context Protocol has a quiet tax: every MCP server throws its own OAuth screen, and users drown in repeated consent prompts. Zero-Touch OAuth, part of MCP’s new Enterprise-Managed Authorization extension, removes that friction by letting an organization provision server access centrally through its identity provider.
## What Zero-Touch OAuth does
Instead of approving each MCP server one by one, users sign in once and the servers they’re entitled to are simply connected. Admins manage who can reach which servers from their existing identity provider, so onboarding an agent to internal data no longer means a string of per-app authorizations. The community had flagged exactly this — authorization sprawl and consent fatigue — as the biggest blocker to running MCP at company scale.
## Backed by Anthropic, Microsoft, and Okta
This isn’t a proposal. The Enterprise-Managed Authorization extension is now marked stable and is being adopted by Anthropic, Microsoft, Okta, and a growing list of MCP servers. With identity heavyweights on board, zero-touch provisioning is the kind of plumbing that makes agentic tools deployable inside large organizations rather than just demoable.
Top AI Product 
Leave a comment