MCP with OAuth

@akshay12390

Basic information

About MCP with OAuth

Forked from

MCP with OAuth config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-weather-starter-webmvc-oauth2-server": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/inspector@0.6.0"
      ]
    }
  }
}

MCP with OAuth tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP with OAuth?

A sample project demonstrating how to secure an MCP server using OAuth2, following the MCP specification’s authorization section. It is built with Spring Boot and Spring Security.

How to use MCP with OAuth?

Run the server with ./mvnw spring-boot:run. Obtain an access token by calling POST /oauth2/token with grant_type=client_credentials and the client ID/secret oidc-client:secret. Then paste the token into the MCP Inspector (v0.6.0) to connect.

Key features of MCP with OAuth

OAuth2 client credentials flow for token issuance
Token validation via Spring Security OAuth2 Resource Server
Token expiration set to 5 minutes
Works only in the servlet stack (no reactive support for token issuance)

Use cases of MCP with OAuth

Securing an MCP server with standard OAuth2 tokens
Testing MCP Inspector connectivity with token‑authenticated endpoints
Demonstrating Spring Authorization Server integration with MCP

Frequently asked questions

How do I obtain an access token?

Send a POST request to `http://localhost:8080/oauth2/token` with `grant_type=client_credentials` and use Basic auth with credentials `oidc-client:secret`.

What are the required dependencies?

Spring Security for infrastructure, Spring Authorization Server for issuing tokens, and Spring Security OAuth2 Resource Server for authenticating tokens.

How long is the token valid?

The token is valid for only 5 minutes.

Does this work with reactive (WebFlux) applications?

No, Spring Authorization Server does not support the reactive stack for issuing tokens. Token issuance works only in the Servlet environment.

Comments

More Developer Tools MCP servers

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

CircleCI MCP Server

CircleCI

Manage CI/CD pipelines, debug failed builds, and optimize test suites directly from your AI agents - no terminal required. The CircleCI MCP Server is a remote server hosted by CircleCI that connects AI tools and agents

GAIP Agents

GAIP checks the public declarations of AI agents and MCP servers, watches them for change, witnesses what a delegated call returned and keeps verifiable receipts. Free, read-only, no account or API key. Every result sta

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci