Replace per-server MCP consent prompts with the now-stable Enterprise-Managed Authorization extension

InfoQ·medium signal

MCP's Enterprise-Managed Authorization extension was promoted to stable in the 2026-07-28 spec, giving organizations a centralized way to control access to MCP servers through their identity provider and replacing per-server consent prompts with a zero-touch flow, aligned with OAuth and OpenID Connect. This closes a real production gap where consent fatigue undermined least-privilege intent. Actionable: move MCP access decisions to your IdP and drop bespoke per-server consent UX for enterprise deployments.