mcp-auth-demos

mcp
Security Audit
Warn
Health Warn
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 7 GitHub stars
Code Warn
  • network request — Outbound network request in greet-cloudflare/raspy-base-e304/package-lock.json
  • network request — Outbound network request in greet-cloudflare/raspy-base-e304/src/worker.ts
  • network request — Outbound network request in greeting-mcp-node/package-lock.json
  • process.env — Environment variable access in greeting-mcp-node/src/config/config.ts
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Model Context Protocol authentication demos - AI assistant integration examples

README.md

MCP Auth Demos: Node.js, Python & Ruby Servers

This repository demonstrates secure, production-ready Model Context Protocol (MCP) servers in Node.js, Python, and Ruby on Rails, with full integration to the Scalekit platform for OAuth 2.1 authentication and dynamic client registration.

Repository Structure

  • greeting-mcp-node/
    Node.js (TypeScript) implementation of an MCP server with Scalekit authentication and permissioned tool access.
  • greeting-mcp-python/
    Python (FastAPI + FastMCP) implementation of an MCP server with Scalekit authentication and permissioned tool access.
  • greeting-mcp-ruby/
    Ruby on Rails implementation of an MCP server with Scalekit OAuth 2.1 authentication. Uses the official MCP Ruby SDK with JWKS-based token validation — no client secret required.

Each subdirectory contains its own README with detailed setup and usage instructions.

Features

  • Scalekit OAuth 2.1 Authentication: Secure, standards-based authentication and authorization for all MCP requests.
  • Dynamic Client Registration: Register MCP servers with Scalekit for secure, permissioned access.
  • JWKS Token Validation: RS256 signature verification via auto-discovered JWKS — no client secrets stored.
  • Tool-Based Architecture: Easily extend with new tools and permissions.
  • Production-Ready: Includes logging, CORS, and environment-based configuration.

Quick Start

See the README in each subproject for setup instructions:

License

This repository is licensed under the MIT License. See LICENSE for details.

Learn More

Reviews (0)

No results found