Hi, I'm building an MCP server using Descope's Agentic Identity Hub and hitting a regression that started Feb 26 afternoon
(was working this morning).
What's working:
- DCR (/v1/mgmt/mcp/client/.../register) — audit log confirms client registers correctly
- Authorize endpoint — correctly redirects to the consent flow page with third_party_app_state_id
- Flow Runner — running agentic-hub-user-consent directly in the console works fine
What's broken:
- POST /v1/flow/next fails with E108201 / "Request sequence validation failed" whenever the flow is initiated via the
agentic OAuth authorize endpoint
- Troubleshoot logs confirm "failed to validate flow nonce"
- Reproduced with both inbound-apps-user-consent and agentic-hub-user-consent flows
Since the Flow Runner works but the OAuth-initiated flow doesn't, the issue is isolated to the agentic OAuth → consent flow
handoff. Project ID: P3A2YVNg0aB7OE4pgMY5gOd50COz, MCP Server ID: MS3A6b1gNUhsxTorYrtk5sJOqiTSw.