Hello Team,
I work for Simplicontract Technologies. We use Keycloak as our IDP. We were on 23, but now we want to integrate external MCP clients like Claude Desktop, Copilot, Cursor with our MCP server. We have upgraded Keycloak to 26.7.1. The first MCP client which we are trying to integrate is Claude Desktop. I followed the documentation, have created scopes mcp:tools, mcp:prompts and mcp:resources and set the audience to our mcp url. I have also created a client profile and client policy for Claude. I am successful till the discovery of OAuth Resource meta data from our server. After this, Claude is sending a request to Keycloak, but Keycloak is rejecting the request with 400. We are stuck!! Below is the request sent by Claude. Can you kindly help? We are stuck and we need to address this issue ASAP. https://test.simplicontract.com/cloak/auth/realms/simplicontract/protocol/openid-connect/auth?response_type=code&client_id=https://claude.ai/oauth/mcp-oauth-client-metadata&redirect_uri=https://claude.ai/api/mcp/auth_callback&code_challenge=WLsYqp3t_pudL3jthM3daNoNvHRK0JCdVl1XrvPbzQc&code_challenge_method=S256&state=JteDDlZVAqKho1TbL1c4kt9QrKTZvdHeOBucU4XHf2k&scope=mcp:tools+offline_access&resource=https://test.simplicontract.com/7tJDqYcX95cww7n/tenants/simplicontract/mcp&prompt=consent