Python SDK / 06 — Credentials

06 — Credentials

Pass a credentials dict to create_context() and the SDK transparently forwards tokens to authenticated MCP servers — both proactively on the first message and as a follow-up if the agent replies with auth-required.

Credential types

The key in the credentials dict must exactly match the name you gave the MCP connector (or the auto-derived hostname if you omitted name).

Full code

"""
06 — MCP credentials.

When an MCP server requires auth, pass a credentials dict to create_context().
The SDK forwards it automatically — no manual retry needed.
"""
import asyncio, os
from corti_agent_sdk import CortiClient, AgentsClient, connectors

MCP_URL   = os.environ.get("MCP_URL", "")
MCP_TOKEN = os.environ.get("MCP_TOKEN", "")

async def main():
    if not MCP_URL or not MCP_TOKEN:
        print("Set MCP_URL and MCP_TOKEN to run this example.")
        return

    async with CortiClient(
        tenant_name="YOUR_TENANT",
        environment="eu",
        auth={"client_id": "YOUR_ID", "client_secret": "YOUR_SECRET"},
    ) as client:
        agents = AgentsClient(client)

        # The connector name "my-mcp" becomes the key in the credentials dict.
        agent = await agents.create(
            name="auth-demo",
            description="Calls an auth-protected MCP server.",
            connectors=[
                connectors.mcp(mcp_url=MCP_URL, name="my-mcp", auth_type="bearer"),
            ],
        )

        ctx = agent.create_context(
            credentials={
                "my-mcp": {"type": "token", "token": MCP_TOKEN},
            }
        )

        reply = await ctx.send_text("List the tools you have access to.")
        print("Status:", reply.status)   # expect "completed"
        print("Reply:", reply.text)

asyncio.run(main())

Next steps