Authentication and security

Epiq Access MCP uses your organization’s identity provider for authentication.

• OAuth 2.0 Authorization Code flow with PKCE

• Token verification using your Okta tenant

• No shared API keys or service accounts

Each request:

• Runs as the signed-in user

• Uses that user’s permissions

• Is validated before execution

If you cannot access data in Epiq Access, the Epiq Access MCP does not return it.