MCP with OAuth

@akshay12390

Basic information

About MCP with OAuth

Forked from

MCP with OAuth config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-weather-starter-webmvc-oauth2-server": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/inspector@0.6.0"
      ]
    }
  }
}

MCP with OAuth tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP with OAuth?

A sample project demonstrating how to secure an MCP server using OAuth2, following the MCP specification’s authorization section. It is built with Spring Boot and Spring Security.

How to use MCP with OAuth?

Run the server with ./mvnw spring-boot:run. Obtain an access token by calling POST /oauth2/token with grant_type=client_credentials and the client ID/secret oidc-client:secret. Then paste the token into the MCP Inspector (v0.6.0) to connect.

Key features of MCP with OAuth

OAuth2 client credentials flow for token issuance
Token validation via Spring Security OAuth2 Resource Server
Token expiration set to 5 minutes
Works only in the servlet stack (no reactive support for token issuance)

Use cases of MCP with OAuth

Securing an MCP server with standard OAuth2 tokens
Testing MCP Inspector connectivity with token‑authenticated endpoints
Demonstrating Spring Authorization Server integration with MCP

Frequently asked questions

How do I obtain an access token?

Send a POST request to `http://localhost:8080/oauth2/token` with `grant_type=client_credentials` and use Basic auth with credentials `oidc-client:secret`.

What are the required dependencies?

Spring Security for infrastructure, Spring Authorization Server for issuing tokens, and Spring Security OAuth2 Resource Server for authenticating tokens.

How long is the token valid?

The token is valid for only 5 minutes.

Does this work with reactive (WebFlux) applications?

No, Spring Authorization Server does not support the reactive stack for issuing tokens. Token issuance works only in the Servlet environment.

Comments

More Developer Tools MCP servers

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

Heard

Let your cloud agents talk to you. Grok Bot, Meta Muse, ChatGPT, Claude, Devin and others report progress to Heard, which reads it out loud on your Mac, and they pick up the replies you send back.

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

Kaiva Bridge

Kaiva Bridge turns your API, database or documents into a managed MCP server for Claude, ChatGPT, Cursor and VS Code. Point it at an OpenAPI or Swagger spec, an API docs link, a cURL command, a Postman collection, a Grap

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools