An authenticated caller of the MCP server. Created by MCP authentication, checked by the authorization policy, and carried through the runtime, the request broker and credential providers.
Optional
OAuth client id, when present.
Token expiry (seconds since epoch), when known.
Stable opaque identifier used in logs and policies.
Configured name (static bearer / stdio), when not personal data.
An authenticated caller of the MCP server. Created by MCP authentication, checked by the authorization policy, and carried through the runtime, the request broker and credential providers.