---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Add MCP server with OAuth 2.1

# Add an MCP server with OAuth 2.1 {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Add an MCP server with OAuth 2.1 in the AI Agent Studio.

## Before you begin

Role required: sn_mcp_client.admin

## About this task

OAuth is the standard method to authenticate MCP servers. If your MCP server supports it, choose OAuth 2.1 as the authentication method.

## Procedure

1. Navigate to AllAI Agent StudioSettingsManage Model Contextual Protocol (MCP) Servers.
2. Select View against MCP Servers.
3. On the Model Context Protocol Server page, select New.
4. On the Add MCP Server Console form, enter a name and the web address for your MCP server.
5. In the Authentication Type field, select OAUTH 2.1.  
6. Select Next.  
   The form extends with the registration details.
7. On the form, fill in the fields.  
   Note:  
   * If your MCP server doesn't support dynamic client registration, register the OAuth client for AI agents manually. Update the client details in AI Agent Studio.
   * The manual registration doesn't auto-populate the field data and must be manually provided.
   {#add-mcp-server-aoauth-2.1__ul_rt1_qzl_bgc}  
   {#add-mcp-server-aoauth-2.1__table_yds_tsh_xfc__entry__2}

   | Field | Description |
   |-|-|
   | Grant Type | How you want to obtain an access token when accessing protected resources. The following options are available: * Authorization Code: A system-generated code used for granting access to an application or resource. * Client Credentials: An access token provided by the administrator to access the application directly. {#add-mcp-server-aoauth-2.1__ul_epg_223_xfc} |
   | Token Authentication Method | Method using which the client credentials are sent when requesting tokens from the Authorization server. You can one of the two options: * Client Secret Basic * Client Secret Post {#add-mcp-server-aoauth-2.1__ul_ftd_hkf_lkc} |
   | Client ID | Unique ID for authentication and authorization purposes. |
   | Client Secret | Unique credentials used for authentication. |
   | Auth Scopes | Specific permissions for an application. Note: The Auth scopes must be comma-separated values. |
   | Authorization URL | Web address of your server to direct authorization. |
   | Token URL | Web address containing the token. |
   | Token Revocation URL | Web address to revoke the previously provided token. |
   [Table 1. Manual Registration form]

   {#add-mcp-server-aoauth-2.1__table_yds_tsh_xfc} {#add-mcp-server-aoauth-2.1__manual-registration}
{#add-mcp-server-aoauth-2.1__manual-registration}
8. Select Add.  
   You're redirected to the Model Context Protocol Server Console record to authenticate the MCP server for adding an MCP tool to an AI agent.  
   Note:  
   On the Model Context Protocol Server Console record, you will see a warning that server requires authentication.
9. Select Save and continue to complete filling the Server details, Access rules, and Tools.
10. Verify the Server details.  
    The Server name, Connection Alias, and Application fields are auto-populated with the information from previous steps. Additionally, you can provide a description for the server.
11. Define Security controls for the MCP Servers.  
    For more information, see [Define security controls for MCP Servers](https://www.servicenow.com/docs/aAd~7ZX6Yb5Hfgl0gD8pSA "Define security controls for an MCP Servers to determine which users can access it and what permissions they have.").
12. Define the Tools for the Model Context Protocol Sever.  
    You can configure the MCP tools in the Assistant Designer. For more information see .
13. Select Authenticate to request a new token.
14. In the third-party authorization page, select Authorize.  
    Note:  
    When OAuth access or refresh tokens aren't available, you must authenticate the OAuth configuration on the MCP server record to add it as an AI agent tool.

*[\>]: and then