TTMSMCPStreamableHTTPTransport.RequireBearerAuthentication Property

Whether a request to the protocol endpoint must carry an accepted access token. Defaults to False.

API unit family: TMS.MCP.Transport.StreamableHTTP Declaring type: TTMSMCPStreamableHTTPTransport Type: Boolean

Syntax

property RequireBearerAuthentication: Boolean;

Default: False

Remarks

With this on, every request to the endpoint must present a bearer token that TTMSMCPStreamableHTTPTransport.OnValidateAccessToken accepts, and that grants every scope listed in TTMSMCPStreamableHTTPTransport.RequiredScopes. A missing or rejected token is answered 401 with a challenge, and a token that is valid but too narrow is answered 403. The channel also begins serving its protected-resource metadata document so a client can discover where to obtain a token. A validation handler must be assigned before starting the channel with this on, or starting raises. This check is separate from the origin check, which applies whether or not authentication is required.