mcp-oauth2.1-server

mcp-oauth2.1-server

0
security

The MCP Server Reference Implementation is a prototype for implementing draft Authorization specification updates using the official TypeScript SDK. It supports authentication via Cognito and Keycloak and is designed for testing within an ngrok environment.

MCP Server Reference Implementation

This document provides an overview of the MCP Server Reference Implementation based on the draft Authorization specification updates. It is built using the official TypeScript SDK and can be tested with a specific Postman collection. The server supports authentication providers such as Cognito and self-hosted Keycloak. Authentication scopes are validated in the format of mcp:access with a specific resource ID. For testing, an ngrok tunnel is recommended to circumvent OAuth 2.1 protocol restrictions on http. The server is set up on port 1335 and can be configured with domains through the AWS Cognito dashboard.