MCP Authentication and Authorization: Test Your AI Agent

Quickchat has a walkthrough for testing access to a private Agent through MCP. It checks who is calling and whether that account may use the Agent, including allowed, unauthorized, anonymous and revoked-access requests.

The exercise isolates access to the hosted Agent with tools and handoff turned off. Quickchat reports local tests using real OAuth exchanges and MCP Inspector; those results apply to the tested configuration.

MCP is included on Free. The full teammate and removal exercise needs collaborator seats: Professional includes three users including the owner, and Business includes ten. Reproducing the Inspector commands needs Node.js 22.19 or later. Generated replies and Simulation runs use AI credits.