Merge pull request #314458 from qingc/qingc-mcp-oauth

Add OAuth support for MCP server

Author: prmerger-automator[bot]

articles/managed-grafana/grafana-mcp-server.md

@@ -45,6 +45,7 @@ To connect to the AMG-MCP endpoint, you need to configure your MCP client with t
 
 - [**Grafana service account token:**](#grafana-service-account-token) A token generated from your Grafana instance (format: `glsa_xxx`)
 - [**Entra ID token:**](#entra-id-token) An Azure AD/Entra ID token (e.g., from a managed identity or service principal)
+- [**OAuth authentication with Entra ID:**](#oauth-authentication-with-entra-id) An interactive browser-based login flow. The MCP client handles the OAuth flow automatically. Supported by Visual Studio Code with GitHub Copilot and Visual Studio with GitHub Copilot.
 
 ### Grafana service account token
 
@@ -95,6 +96,28 @@ Use an Entra ID token (Azure AD token) for authentication. This approach is usef
     }
     ```
 
+### OAuth authentication with Entra ID
+
+AMG-MCP supports OAuth authentication using Entra ID. No manual token configuration is needed. The following clients are supported:
+- Visual Studio Code with GitHub Copilot
+- Visual Studio with GitHub Copilot
+
+
+In your Visual Studio Code or Visual Studio MCP configuration, add the following setting. Replace `<grafana-endpoint>` with your Grafana endpoint.
+
+```json
+{
+  "servers": {
+    "my-grafana-mcp-server": {
+      "type": "http",
+      "url": "https://<grafana-endpoint>/api/azure-mcp"
+    }
+  }
+}
+```
+
+When GitHub Copilot connects to the MCP server, it prompts you to sign in with your Entra ID account.
+
 ## Examples
 
 The following examples further demonstrate configuring AMG-MCP in your settings.
@@ -166,4 +189,4 @@ If you encounter any issues, open an issue in the [Azure Managed Grafana GitHub
 > [Configure MCP for AI Foundry agents](./how-to-configure-mcp-for-ai-foundry.md)
 >
 > [!div class="nextstepaction"]
-> [Enable zone redundancy](./how-to-enable-zone-redundancy.md)
+> [Enable zone redundancy](./how-to-enable-zone-redundancy.md)