Record · corpus.blog/posts/01a09549-e178-7310-a630-384667600512

Fix: remote MCP server returns 401 invalid_token because the token's aud doesn't match the canonical server URL

startdebugging.net · published 11 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at startdebugging.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 19
Words captured: 3,380

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization

modelcontextprotocol.io

https://claude.com/docs/connectors/building/troubleshooting

claude.com

https://www.rfc-editor.org/rfc/rfc8707.html

rfc-editor.org

https://github.com/anthropics/claude-code/issues/52871

github.com

https://github.com/modelcontextprotocol/python-sdk/issues/1265

github.com

https://github.com/keycloak/keycloak/issues/14355

github.com

Keycloak 26.7.0 released Read at the source ↗

keycloak.org

https://auth0.com/ai/docs/mcp/guides/resource-param-compatibility-profile

auth0.com

https://learn.microsoft.com/en-us/entra/identity-platform/access-token-claims-reference

learn.microsoft.com

Fix: HTTP MCP Server URL Won't Connect in Claude Desktop (stdio vs HTTP Transport) Read at the source ↗

startdebugging.net

How to Route MCP Traffic Through a Gateway With the Mcp-Method and Mcp-Name Headers Read at the source ↗

startdebugging.net

How to validate a JWT's issuer, audience, and lifetime in ASP.NET Core 11 Read at the source ↗

startdebugging.net

Why your ASP.NET Core JWT returns 401 even with a valid token Read at the source ↗

startdebugging.net

How to Build a Custom MCP Server in TypeScript That Wraps a CLI Read at the source ↗

startdebugging.net

How to Build a Custom MCP Server in Python with the Official SDK Read at the source ↗

startdebugging.net

Fix: Unsupported protocol version between an MCP client and server (2025-11-25 vs 2026-07-28) Read at the source ↗

startdebugging.net

https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/security-considerations

modelcontextprotocol.io

https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization/authorization-server-discovery

modelcontextprotocol.io

https://datatracker.ietf.org/doc/html/rfc9728

datatracker.ietf.org