* Add sample for per-run refreshable MCP authentication headers
Adds a Foundry RAPI sample that attaches per-run, refreshable authentication headers to MCP requests using existing primitives: a DelegatingHandler on the MCP transport's HttpClient plus an AsyncLocal run scope. The same agent runs under two contexts, each minting a fresh token, proving the header is per run rather than bound at agent or connection creation time.
The handler attaches the bearer only over HTTPS to the MCP server's own origin, logs the non-secret label only, disables cookies, and checks certificate revocation. The README covers security considerations and production notes.
Fixes#1631
* Address PR review: harden redirect handling, nest-safe scope, README env vars
Disable AllowAutoRedirect on the shared handler so a redirect cannot carry the bearer past the origin check. Save and restore the prior run scope instead of clearing to null so the helper is safe under nesting. Note the Foundry env vars in the samples folder README row and update the sample README security notes.
Get Started with Microsoft Agent Framework for C# Developers
Quickstart
Basic Agent - .NET
usingAzure.AI.OpenAI;usingAzure.Identity;usingMicrosoft.Agents.AI;usingOpenAI.Responses;varendpoint=Environment.GetEnvironmentVariable("AZURE_OPENAI_ENDPOINT")!;vardeploymentName=Environment.GetEnvironmentVariable("AZURE_OPENAI_DEPLOYMENT_NAME")!;varagent=newAzureOpenAIClient(newUri(endpoint),newAzureCliCredential()).GetResponsesClient(deploymentName).AsAIAgent(name:"HaikuBot",instructions:"You are an upbeat assistant that writes beautifully.");Console.WriteLine(awaitagent.RunAsync("Write a haiku about Microsoft Agent Framework."));
Roger Barreto
15df1152fc