Remove SEP-991 references from comments

Remove temporary SEP number references from code comments since these
are difficult to maintain and can become outdated. The CIMD (Client ID
Metadata Document) terminology is kept as it's a meaningful acronym.

Author: pcarleton

examples/clients/simple-auth-client/mcp_simple_auth_client/main.py

@@ -191,7 +191,7 @@ async def _default_redirect_handler(authorization_url: str) -> None:
                 webbrowser.open(authorization_url)
 
             # Create OAuth authentication handler using the new interface
-            # Use client_metadata_url to enable CIMD (SEP-991) when the server supports it
+            # Use client_metadata_url to enable CIMD when the server supports it
             oauth_auth = OAuthClientProvider(
                 server_url=self.server_url,
                 client_metadata=OAuthClientMetadata.model_validate(client_metadata_dict),

src/mcp/client/auth/oauth2.py

@@ -99,7 +99,7 @@ class OAuthContext:
     redirect_handler: Callable[[str], Awaitable[None]] | None
     callback_handler: Callable[[], Awaitable[tuple[str, str | None]]] | None
     timeout: float = 300.0
-    client_metadata_url: str | None = None  # SEP-991: URL-based client ID
+    client_metadata_url: str | None = None
 
     # Discovered metadata
     protected_resource_metadata: ProtectedResourceMetadata | None = None
@@ -241,7 +241,7 @@ def __init__(
             redirect_handler: Handler for authorization redirects.
             callback_handler: Handler for authorization callbacks.
             timeout: Timeout for the OAuth flow.
-            client_metadata_url: SEP-991 URL-based client ID. When provided and the server
+            client_metadata_url: URL-based client ID. When provided and the server
                 advertises client_id_metadata_document_supported=true, this URL will be
                 used as the client_id instead of performing dynamic client registration.
                 Must be a valid HTTPS URL with a non-root pathname.
@@ -595,12 +595,12 @@ async def async_auth_flow(self, request: httpx.Request) -> AsyncGenerator[httpx.
                         self.context.oauth_metadata,
                     )
 
-                    # Step 4: Register client or use URL-based client ID (SEP-991)
+                    # Step 4: Register client or use URL-based client ID (CIMD)
                     if not self.context.client_info:
                         if should_use_client_metadata_url(
                             self.context.oauth_metadata, self.context.client_metadata_url
                         ):
-                            # SEP-991: Use URL-based client ID
+                            # Use URL-based client ID (CIMD)
                             logger.debug(f"Using URL-based client ID (CIMD): {self.context.client_metadata_url}")
                             client_information = create_client_info_from_metadata_url(
                                 self.context.client_metadata_url,  # type: ignore[arg-type]

src/mcp/client/auth/utils.py

@@ -246,7 +246,7 @@ async def handle_registration_response(response: Response) -> OAuthClientInforma
 def is_valid_client_metadata_url(url: str | None) -> bool:
     """Validate that a URL is suitable for use as a client_id (CIMD).
 
-    Per SEP-991, the URL must be HTTPS with a non-root pathname.
+    The URL must be HTTPS with a non-root pathname.
 
     Args:
         url: The URL to validate
@@ -269,7 +269,7 @@ def should_use_client_metadata_url(
 ) -> bool:
     """Determine if URL-based client ID (CIMD) should be used instead of DCR.
 
-    Per SEP-991, URL-based client IDs should be used when:
+    URL-based client IDs should be used when:
     1. The server advertises client_id_metadata_document_supported=true
     2. The client has a valid client_metadata_url configured
 
@@ -294,7 +294,7 @@ def create_client_info_from_metadata_url(
 ) -> OAuthClientInformationFull:
     """Create client information using a URL-based client ID (CIMD).
 
-    Per SEP-991, when using URL-based client IDs, the URL itself becomes the client_id
+    When using URL-based client IDs, the URL itself becomes the client_id
     and no client_secret is used (token_endpoint_auth_method="none").
 
     Args:

tests/client/test_auth.py

@@ -1833,7 +1833,7 @@ def test_extract_field_from_www_auth_invalid_cases(
 
 
 class TestCIMD:
-    """Test SEP-991 Client ID Metadata Document (CIMD) support."""
+    """Test Client ID Metadata Document (CIMD) support."""
 
     @pytest.mark.parametrize(
         "url,expected",