MCP (Model Context Protocol) requires RFC 8414, RFC 7591, and short-form scopes. Microsoft Entra ID supports none of them. I built a lightweight OAuth compatibility layer that bridges the gap, letting AI IDEs like Cursor authenticate against Azure-hosted MCP servers using standard Entra ID credentials. Includes a Zero-Trust hardening pass covering SSRF, open-redirect, and path traversal mitigations.