Authentication
OAuth 2.1 authentication for the Wonderflow MCP Connector
The Wonderflow MCP Connector uses OAuth 2.1 via Auth0 to authenticate clients. You sign in with your existing Wonderflow dashboard credentials — no extra API keys or service accounts are needed.
🔄 How authentication works
When you connect an MCP client to Wonderflow, the following happens:
🔌 Connect your client
You configure your MCP client with the Wonderflow MCP endpoint and client ID. When you first connect (or your session expires), the client opens a browser window for authentication.
🔑 Sign in with Auth0
You sign in using your standard Wonderflow dashboard credentials through the Auth0 login page. This is the same login you use for the Wonderboard.
✅ Authorization granted
After successful login, Auth0 issues tokens to the MCP client. The client uses these tokens for all subsequent requests to the Wonderflow MCP server, scoped to your identity, permissions, and scope visibility.
♻️ Automatic token refresh
When the access token expires, the client automatically refreshes it using the refresh token — no manual re-authentication required until the refresh token itself expires.
👤 Who can authenticate?
Any Wonderflow user with a Wonderboard account, once the MCP Connector has been enabled on your Space. Your MCP session inherits the same permissions and scope visibility as your dashboard account.