Skillget

js

mcp
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 51 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in packages/mcp-auth/package.json
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

🔐 Plug-and-play auth for Node.js MCP servers.

README.md

MCP Auth Node.js SDK

GitHub branch check runs
codecov
NPM version
npm bundle size
License

The MCP spec requires OAuth 2.1 and other RFCs for auth. Instead of spending weeks on them, use MCP Auth to connect to a trusted provider with a few lines of code.

mcp-auth targets the latest MCP specification and the MCP TypeScript SDK v2, implementing the spec's authorization requirements — RFC 9728 Protected Resource Metadata and RFC 8707 audience-bound token validation — for any OAuth 2.0 / OpenID Connect provider.

Get started

Is my provider supported?

Check out the MCP-compatible providers to see which providers are supported. It also includes a tool for real-time checking of provider compatibility.

Installation

npm install mcp-auth

Or use your package manager of choice, such as pnpm or yarn.

Still on MCP SDK v1 (@modelcontextprotocol/sdk)? Stay on the 0.2 line — npm install [email protected] — and see the v0.2.0 code and samples.

See the documentation for the full guide.

Join the discussion

Join the MCP Auth org discussion to ask questions or share your feedback.

Reviews (0)

No results found