What is Dynamic Client Registration?

In short:Dynamic Client Registration, or DCR, lets an OAuth client register itself with an authorization server through an API call. Early MCP authorization relied on it. The 2026-07-28 MCP specification replaced it with CIMD, because open registration filled servers with unknown, unverifiable clients.

How does it work?

The client posts its metadata to a registration endpoint and receives a client ID, sometimes a secret.

What does it look like in practice?

Idira and Descope both name DCR in public material.

Related terms

All 40 glossary terms