Paste-a-key is dead — the MCP auth checklist IT will sign

IdP-managed MCP auth exists. Most pilots still use personal tokens. Here is the one-page packet that gets a connector approved.

Source: Influzer.ai

Paste-a-key is dead as an enterprise approval story. IdP-managed MCP connectors (Claude + Okta and the open auth direction) already answer who issues credentials and how offboarding works. What teams still miss is the handoff packet.

Bring one page: server slug, named owner, auth lane (IdP / org OAuth / local-only), IdP groups, read vs write class, environments, kill switch, and a tools/list snapshot. Prefer eyes before hands. Keep Discovery for search-not-install. Reject personal PATs in shared mcp.json.

Full checklist and 48-hour path: Paste-a-key is dead.