Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"mcpserver-demo-with-oauth2": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Important: This project simulates SAP-like MCP tools for demos; it is not an SAP integration.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in developer-tools / security
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
40+ production-ready SwiftUI recipes for building full-stack iOS apps via MCP.
Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite
MCP Security Weekly
Get CVE alerts and security updates for Mcpserver Demo With Oauth2 and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Important: This project simulates SAP-like MCP tools for demos; it is not an SAP integration.
The service is built with the Model Context Protocol (MCP) TypeScript SDK and secures its HTTP transport with Microsoft Entra ID. It is frequently used together with Microsoft Dev Tunnels and Copilot Studio agents.
Use Node 20 LTS
nvm use 20 (or ensure node --version reports 20.x).
Install dependencies
npm install
Create your environment file
cp .env.sample .env and update:
TENANT_ID: your Microsoft Entra tenant GUIDAUDIENCE: the Application (client) ID or Application ID URI of the API appPORT: optional (defaults to 3000)Start the dev server
npm run dev → http://localhost:3000/mcp
Expose the port (optional for Copilot Studio)
devtunnel host -p 3000 --allow-anonymous
Type safety check (optional, fast)
npm run typecheck
Production-style run
npm start automatically builds to dist/ and launches the compiled server.
/mcp) backed by @modelcontextprotocol/sdk.| Variable | Required | Description | Example |
|---|---|---|---|
TENANT_ID | Yes | Tenant GUID (preferred) or domain. | ffffffff-ffff-ffff-ffff-ffffffffffff |
AUDIENCE | Yes | Expected JWT aud claim: API App ID URI or GUID. | api://ffffffff-ffff-ffff-ffff-ffffffffffff |
PORT | No | HTTP port for the Express server. | 4044 |
ALLOWED_SCOPES | No | Space or comma separated list of delegated scopes that are accepted. | Mcp.Access access_as_mcp |
ALLOWED_ROLES | No | Comma separated list of app roles (client credentials) that are accepted. | McpServer.Invoke,McpServer.Read |
CORS_ORIGIN | No | Comma separated allowlist. Use * fo |