MCP with OAuth

@akshay12390

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

akshay12390

关于 MCP with OAuth

Forked from

MCP with OAuth 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-weather-starter-webmvc-oauth2-server": {
      "command": "npx",
      "args": [
        "@modelcontextprotocol/inspector@0.6.0"
      ]
    }
  }
}

MCP with OAuth 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is MCP with OAuth?

A sample project demonstrating how to secure an MCP server using OAuth2, following the MCP specification’s authorization section. It is built with Spring Boot and Spring Security.

How to use MCP with OAuth?

Run the server with ./mvnw spring-boot:run. Obtain an access token by calling POST /oauth2/token with grant_type=client_credentials and the client ID/secret oidc-client:secret. Then paste the token into the MCP Inspector (v0.6.0) to connect.

Key features of MCP with OAuth

OAuth2 client credentials flow for token issuance
Token validation via Spring Security OAuth2 Resource Server
Token expiration set to 5 minutes
Works only in the servlet stack (no reactive support for token issuance)

Use cases of MCP with OAuth

Securing an MCP server with standard OAuth2 tokens
Testing MCP Inspector connectivity with token‑authenticated endpoints
Demonstrating Spring Authorization Server integration with MCP

常见问题

How do I obtain an access token?

Send a POST request to `http://localhost:8080/oauth2/token` with `grant_type=client_credentials` and use Basic auth with credentials `oidc-client:secret`.

What are the required dependencies?

Spring Security for infrastructure, Spring Authorization Server for issuing tokens, and Spring Security OAuth2 Resource Server for authenticating tokens.

How long is the token valid?

The token is valid for only 5 minutes.

Does this work with reactive (WebFlux) applications?

No, Spring Authorization Server does not support the reactive stack for issuing tokens. Token issuance works only in the Servlet environment.

开发工具分类下的更多 MCP 服务器

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

Casefile

azimov777

One case file per task — shared by every session, agent and person that touches it. Self-hosted MCP server and live board. MIT.

Edgegap

Mathieu Duperre

edgegap-mcp connects your coding agent to Edgegap, the orchestration platform behind live multiplayer titles at 390+ studios. Instead of breaking off to a dashboard or an API reference mid-task, the agent creates the app

Hermoso

Hermoso is an AI marketing agent and AI ad generator you run from your AI agent: a remote MCP server that researches the ads already winning in your market, makes image and video ads and organic posts in your brand, publ