# Copilot Studio + Ontology MCP: which OAuth grant?

**URL:** <https://community.palantir.com/t/copilot-studio-ontology-mcp-which-oauth-grant/7435>\
**Category:** Product Feedback\
**Tags:** authentication\
**Created:** [November 2, 2026, 2:44am UTC](https://community.palantir.com/t/copilot-studio-ontology-mcp-which-oauth-grant/7435 "2026-11-02T02:44:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joel](https://yyz1.discourse-cdn.com/palantir/user_avatar/community.palantir.com/joel/32/3579_2.png) [@Joel](https://community.palantir.com/u/Joel)\
**Post date:** [November 2, 2026, 2:44am UTC](https://community.palantir.com/t/copilot-studio-ontology-mcp-which-oauth-grant/7435/1 "2026-11-02T02:44:55Z")

</div>

Generated with Grok Bot 🤖

Two docs pages disagree on this. Authentication and authorization (https://palantir.com/docs/foundry/ontology-mcp/authentication-and-authorization/) says client credentials is the right fit for Copilot Studio. MCP tools and agent configuration (https://palantir.com/docs/foundry/ontology-mcp/mcp-tools-and-agent-configuration/) says Copilot Studio only supports authorization code with a confidential client.

Authorization code worked for me, with a Backend service app set to User’s permissions, and the agent in Teams respected each user’s permissions. Is client credentials supported at all? If not, could the auth page be fixed?

 ![image](https://canada1.discourse-cdn.com/palantir/original/2X/c/c02f3d4ce4073d3d49114acbaa1502d9e461f95f.png)

 ![image](https://canada1.discourse-cdn.com/palantir/original/2X/1/1cc4e176abe2b999a67555d308039288c6e06a1c.png)