Added OAuth2.1 Static authentication option for static client_id and client_secret for MCP servers
Description
I needed to add some MCP servers to an Open WebUI instance, but these MCP servers required static oauth client data (client_id and client_secret). This was not possible with the current version of Open WebUI. I developed an extra authentication option where these fields can be entered by the end user, and those being used to register the client.
Added
Added OAuth 2.1 - Static auth type for MCP servers. See screenshot below in the Screenshots section
Additional Information
I was doubting to include these options directly in the OAuth 2.1 aut htype, but deliberately decided to make it a separate option to reduce possible confusion since a lot of MCPs actually do accept the dynamic OAuth data.
Screenshots or Videos
Contributor License Agreement
By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.
Note
Deleting the CLA section will lead to immediate closure of your PR and it will not be merged in.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/22266
**Author:** [@DonMul](https://github.com/DonMul)
**Created:** 3/5/2026
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `addOAuth2.1Static`
---
### 📝 Commits (10+)
- [`fe6783c`](https://github.com/open-webui/open-webui/commit/fe6783c16699911c7be17392596d579333fb110c) Merge pull request #19030 from open-webui/dev
- [`fc05e0a`](https://github.com/open-webui/open-webui/commit/fc05e0a6c5d39da60b603b4d520f800d6e36f748) Merge pull request #19405 from open-webui/dev
- [`e3faec6`](https://github.com/open-webui/open-webui/commit/e3faec62c58e3a83d89aa3df539feacefa125e0c) Merge pull request #19416 from open-webui/dev
- [`9899293`](https://github.com/open-webui/open-webui/commit/9899293f050ad50ae12024cbebee7e018acd851e) Merge pull request #19448 from open-webui/dev
- [`140605e`](https://github.com/open-webui/open-webui/commit/140605e660b8186a7d5c79fb3be6ffb147a2f498) Merge pull request #19462 from open-webui/dev
- [`6f1486f`](https://github.com/open-webui/open-webui/commit/6f1486ffd0cb288d0e21f41845361924e0d742b3) Merge pull request #19466 from open-webui/dev
- [`d95f533`](https://github.com/open-webui/open-webui/commit/d95f533214e3fe5beb5e41ec1f349940bc4c7043) Merge pull request #19729 from open-webui/dev
- [`a727153`](https://github.com/open-webui/open-webui/commit/a7271532f8a38da46785afcaa7e65f9a45e7d753) 0.6.43 (#20093)
- [`6adde20`](https://github.com/open-webui/open-webui/commit/6adde203cd292a9e3af9c64a2ae36b603fed096a) Merge pull request #20394 from open-webui/dev
- [`f9b0534`](https://github.com/open-webui/open-webui/commit/f9b0534e0c442631d1cb7205169588b9b6204179) Merge pull request #20522 from open-webui/dev
### 📊 Changes
**7 files changed** (+210 additions, -39 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/open_webui/main.py` (+29 -24)
📝 `backend/open_webui/routers/configs.py` (+29 -8)
📝 `backend/open_webui/routers/tools.py` (+2 -2)
📝 `backend/open_webui/utils/middleware.py` (+1 -1)
📝 `backend/open_webui/utils/oauth.py` (+98 -1)
📝 `src/lib/apis/configs/index.ts` (+3 -0)
📝 `src/lib/components/AddToolServerModal.svelte` (+48 -3)
</details>
### 📄 Description
<!--
⚠️ CRITICAL CHECKS FOR CONTRIBUTORS (READ, DON'T DELETE) ⚠️
1. Target the `dev` branch. PRs targeting `main` will be automatically closed.
2. Do NOT delete the CLA section at the bottom. It is required for the bot to accept your PR.
-->
# Changelog Entry
Added `OAuth2.1 Static` authentication option for static client_id and client_secret for MCP servers
### Description
I needed to add some MCP servers to an Open WebUI instance, but these MCP servers required static oauth client data (client_id and client_secret). This was not possible with the current version of Open WebUI. I developed an extra authentication option where these fields can be entered by the end user, and those being used to register the client.
### Added
Added `OAuth 2.1 - Static` auth type for MCP servers. See screenshot below in the Screenshots section
---
### Additional Information
I was doubting to include these options directly in the OAuth 2.1 aut htype, but deliberately decided to make it a separate option to reduce possible confusion since a lot of MCPs actually do accept the dynamic OAuth data.
### Screenshots or Videos
<img width="483" height="513" alt="Screenshot 2026-03-05 at 16 17 43" src="https://github.com/user-attachments/assets/f6b00266-21e3-43a4-960c-d274369c350d" />
### Contributor License Agreement
<!--
🚨 DO NOT DELETE THE TEXT BELOW 🚨
Keep the "Contributor License Agreement" confirmation text intact.
Deleting it will trigger the CLA-Bot to INVALIDATE your PR.
-->
By submitting this pull request, I confirm that I have read and fully agree to the [Contributor License Agreement (CLA)](https://github.com/open-webui/open-webui/blob/main/CONTRIBUTOR_LICENSE_AGREEMENT), and I am providing my contributions under its terms.
> [!NOTE]
> Deleting the CLA section will lead to immediate closure of your PR and it will not be merged in.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/22266
Author: @DonMul
Created: 3/5/2026
Status: ❌ Closed
Base:
dev← Head:addOAuth2.1Static📝 Commits (10+)
fe6783cMerge pull request #19030 from open-webui/devfc05e0aMerge pull request #19405 from open-webui/deve3faec6Merge pull request #19416 from open-webui/dev9899293Merge pull request #19448 from open-webui/dev140605eMerge pull request #19462 from open-webui/dev6f1486fMerge pull request #19466 from open-webui/devd95f533Merge pull request #19729 from open-webui/deva7271530.6.43 (#20093)6adde20Merge pull request #20394 from open-webui/devf9b0534Merge pull request #20522 from open-webui/dev📊 Changes
7 files changed (+210 additions, -39 deletions)
View changed files
📝
backend/open_webui/main.py(+29 -24)📝
backend/open_webui/routers/configs.py(+29 -8)📝
backend/open_webui/routers/tools.py(+2 -2)📝
backend/open_webui/utils/middleware.py(+1 -1)📝
backend/open_webui/utils/oauth.py(+98 -1)📝
src/lib/apis/configs/index.ts(+3 -0)📝
src/lib/components/AddToolServerModal.svelte(+48 -3)📄 Description
Changelog Entry
Added
OAuth2.1 Staticauthentication option for static client_id and client_secret for MCP serversDescription
I needed to add some MCP servers to an Open WebUI instance, but these MCP servers required static oauth client data (client_id and client_secret). This was not possible with the current version of Open WebUI. I developed an extra authentication option where these fields can be entered by the end user, and those being used to register the client.
Added
Added
OAuth 2.1 - Staticauth type for MCP servers. See screenshot below in the Screenshots sectionAdditional Information
I was doubting to include these options directly in the OAuth 2.1 aut htype, but deliberately decided to make it a separate option to reduce possible confusion since a lot of MCPs actually do accept the dynamic OAuth data.
Screenshots or Videos
Contributor License Agreement
By submitting this pull request, I confirm that I have read and fully agree to the Contributor License Agreement (CLA), and I am providing my contributions under its terms.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.