root.agentConnectors.toolSource.localMcpServer.authorization object

{
  "type": "None | OAuthPluginVault | ApiKeyPluginVault | DynamicClientRegistration | AzureKeyVault",
  "referenceId": "{string}"
}

{
  "type": "object",
  "description": "Authorization configuration for connecting to the local MCP server. The design mirrors that of Plugin Manifests https://learn.microsoft.com/microsoft-365-copilot/extensibility/api-plugin-manifest-2.3",
  "properties": {
    "type": {
      "type": "string",
      "enum": [
        "None",
        "OAuthPluginVault",
        "ApiKeyPluginVault",
        "DynamicClientRegistration",
        "AzureKeyVault"
      ],
      "description": "The type of authorization required to invoke the MCP server. Supported values are: \u0027None\u0027 (anonymous access), \u0027OAuthPluginVault\u0027 (OAuth flow with referenceId), \u0027ApiKeyPluginVault\u0027 (API Key with referenceId), \u0027DynamicClientRegistration\u0027 (dynamic client registration with referenceId), \u0027AzureKeyVault\u0027 (Azure Key Vault integration)."
    },
    "referenceId": {
      "type": "string",
      "maxLength": 128,
      "description": " (maxLength: 128)\tA reference identifier used when type is OAuthPluginVault, ApiKeyPluginVault, DynamicClientRegistration, or AzureKeyVault. The referenceId value is acquired independently when providing the necessary authorization configuration values. This mechanism exists to prevent the need for storing secret values in the plugin manifest."
    }
  },
  "additionalProperties": false,
  "required": [
    "type"
  ],
  "if": {
    "properties": {
      "type": {
        "enum": [
          "OAuthPluginVault",
          "ApiKeyPluginVault",
          "DynamicClientRegistration",
          "AzureKeyVault"
        ]
      }
    }
  },
  "then": {
    "required": [
      "referenceId"
    ]
  }
}