Mcp Oauth2.1 Server

Name: Mcp Oauth2.1 Server
Author: QuantGeekDev

by QuantGeekDev

Reference mcp server implementation of draft mcp oauth spec https://modelcontextprotocol.io/specification/draft/basic/authorization#2-3-authorization-server-discovery

8 0 tools GitHub

No known CVEs

No license

Stale

Last commit 362d ago

Works with most clients

Transport: http

0 tools

Grade F

Edit this pageView history

Developer Tools Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-oauth2-1-server": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/mcp-oauth2-1-server)](https://mcppedia.org/s/mcp-oauth2-1-server)

Read me

What Mcp Oauth2.1 Server does

Reference mcp server implementation of draft mcp oauth spec https://modelcontextprotocol.io/specification/draft/basic/authorization#2-3-authorization-server-discovery

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

23/100across 5 weighted dimensions

How we score →

0255075100

−77

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Mcp Oauth2.1 Server safe to use?: Mcp Oauth2.1 Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Mcp Oauth2.1 Server?: Mcp Oauth2.1 Server can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Mcp Oauth2.1 Server?: Mcp Oauth2.1 Server is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is Mcp Oauth2.1 Server actively maintained?: Mcp Oauth2.1 Server is less actively maintained — last commit was 362 days ago. It has 8 GitHub stars.

Similar servers

Others in developer-tools / security

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

io.github.signerlabs/shipswift96

40+ production-ready SwiftUI recipes for building full-stack iOS apps via MCP.

2.1k 3

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

MCP Security Weekly

Get CVE alerts and security updates for Mcp Oauth2.1 Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Important Note

Keep in mind that OAuth 2.1 doesn't allow http protocol, so you will want to use ngrok with a static url (available for free from ngrok) to properly test this out.

If you want to use localhost without ngrok because you don't care, you can override the PORT and PROTOCOL env variables for the authorization and resource servers by setting them in .envs (check config folder if you're confused)

Setup with ngrok

Build and start the server:

npm i
npm run build
npm run start

The MCP server will start on port 1335.

In another terminal, create the ngrok tunnel to the MCP server:

ngrok http --domain=<get-a-custom-domain-from-ngrok(free)-and-place-here> 1335

Configure this resource server in the Domains tab of your AWS Cognito dashboard

Frequently Asked Questions

Is Mcp Oauth2.1 Server safe to use?

Mcp Oauth2.1 Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Mcp Oauth2.1 Server?

Mcp Oauth2.1 Server can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Mcp Oauth2.1 Server?

Mcp Oauth2.1 Server is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is Mcp Oauth2.1 Server actively maintained?

Mcp Oauth2.1 Server is less actively maintained — last commit was 362 days ago. It has 8 GitHub stars.

MCP Server Reference Implementation

This is a reference MCP Server implementation of the draft Authorization spec updates using the official typescript sdk.

This repo can be used with this Postman collection

Authentication Providers

There are two separate auth provider options:

Cognito
Keycloak (self-hosted)

We validate the scope: mcp:access, with <resource-id>/mcp:access. For example, https://mcp-server.com/mcp:access

Important Note

Keep in mind that OAuth 2.1 doesn't allow http protocol, so you will want to use ngrok with a static url (available for free from ngrok) to properly test this out.

Setup with ngrok

Build and start the server:
```
npm i
npm run build
npm run start
```
The MCP server will start on port 1335.

In another terminal, create the ngrok tunnel to the MCP server:

ngrok http --domain=<get-a-custom-domain-from-ngrok(free)-and-place-here> 1335

Configure this resource server in the Domains tab of your AWS Cognito dashboard