mcp_auth_server

Demonstrates OAuth 2.1, PKCE, and protected resource access in an MCP server.

Source

third_party_registry

Updated

2026-07-06

// securityCaution

Runs locally
Open source

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

No copy-paste install info for "mcp_auth_server" yet — see the docs or source repo.

// examples

Validate the OAuth authorization flow

Prompt

Use mcp_auth_server to demonstrate a complete OAuth 2.1 authorization flow, including client registration, PKCE parameter generation, authorization code exchange, and access token retrieval, and explain the request and response at each step.

Expected

A complete authorization flow example showing key parameters, API call order, and explained responses.

Test protected resource access

Prompt

Use mcp_auth_server to obtain an access token and call a protected resource endpoint, then demonstrate the differences in responses when the token is missing, invalid, and valid.

Expected

Shows protected endpoint access results and clearly distinguishes authorization failure and success cases.

Demonstrate step-up authentication

Prompt

Use mcp_auth_server to simulate a step-up authentication scenario: first access a resource with normal privileges, then trigger higher-level authentication and obtain a new token for sensitive resources.

Expected

A phased authentication example explaining when step-up authentication is triggered and how access changes after elevation.