MCP.so
Sign In

MCP with OAuth

@akshay12390

Repository

About MCP with OAuth

Forked from

Basic information

Category

Developer Tools

Runtime

java

Transports

stdio

Publisher

akshay12390

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-weather-starter-webmvc-oauth2-server": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/[email protected]"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP with OAuth?

A sample project demonstrating how to secure an MCP server using OAuth2, following the MCP specification’s authorization section. It is built with Spring Boot and Spring Security.

How to use MCP with OAuth?

Run the server with ./mvnw spring-boot:run. Obtain an access token by calling POST /oauth2/token with grant_type=client_credentials and the client ID/secret oidc-client:secret. Then paste the token into the MCP Inspector (v0.6.0) to connect.

Key features of MCP with OAuth

  • OAuth2 client credentials flow for token issuance
  • Token validation via Spring Security OAuth2 Resource Server
  • Token expiration set to 5 minutes
  • Works only in the servlet stack (no reactive support for token issuance)

Use cases of MCP with OAuth

  • Securing an MCP server with standard OAuth2 tokens
  • Testing MCP Inspector connectivity with token‑authenticated endpoints
  • Demonstrating Spring Authorization Server integration with MCP

FAQ from MCP with OAuth

How do I obtain an access token?

Send a POST request to http://localhost:8080/oauth2/token with grant_type=client_credentials and use Basic auth with credentials oidc-client:secret.

What are the required dependencies?

Spring Security for infrastructure, Spring Authorization Server for issuing tokens, and Spring Security OAuth2 Resource Server for authenticating tokens.

How long is the token valid?

The token is valid for only 5 minutes.

Does this work with reactive (WebFlux) applications?

No, Spring Authorization Server does not support the reactive stack for issuing tokens. Token issuance works only in the Servlet environment.

Comments

More Developer Tools MCP servers

Smithery CLI

smithery-ai

Install, manage and develop MCP servers and skills for agents

788

TalkToFigma

sonnylazuardi

TalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to communicate with Figma for reading designs and modifying them programmatically.

6.9K

Unity MCP (Server + Plugin)

IvanMurzak

AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for fr

3.5K

Stakpak Agent CLI

stakpak

Ship your code, on autopilot. An open source agent that lives on your machines 24/7 and keeps your apps running. 🦀

1.6K

test

cloudwego

The ultimate LLM/AI application development framework in Go.

12.2K