The OpenEdge Command Center MCP Server uses the authentication mode configured for the OpenEdge Command Center Server:

  • Local authentication with a personal access token (PAT)
  • Identity provider (IdP) authentication with OpenID Connect (OIDC)

An OpenEdge Command Center Server installation uses one authentication mode at a time. Users do not select the mode in the MCP client.

Credential handling and role-based access

OpenEdge Command Center Server authenticates each MCP connection and authorizes each request. The MCP Server does not grant additional permissions or provide a separate role-based authorization system.

  • In local authentication mode, access is based on the roles and permissions of the PAT owner.
  • In OIDC authentication mode, access is based on the roles provided by the identity provider and enforced by OpenEdge Command Center.

The MCP Server returns only information that the authenticated user is authorized to access. It does not provide tools to modify OpenEdge Command Center resources or manage PATs, passwords, or identity-provider credentials. Manage PATs through the OpenEdge Command Center APIs.