MCP ExplorerExplorer

Mcp Auth Servers

@localdenon a year ago
8 MIT
FreeCommunity
AI Systems
#authentication#authorization#mcp#model-context-protocol#security
🔒 Reference MCP servers that demonstrate how authentication works with the current Model Context Protocol specification.

Overview

What is Mcp Auth Servers

mcp-auth-servers are reference servers that demonstrate how authentication works according to the Model Context Protocol specification. They serve as examples for developers and organizations looking to implement authentication mechanisms.

Use cases

Use cases include developing applications that require user authentication, testing authentication flows, and providing examples for integrating various identity providers into applications.

How to use

To use mcp-auth-servers, developers can clone the repository and run the servers in either local or remote environments. The servers are designed for various scenarios and can be configured based on the specific identity provider being used.

Key features

Key features include support for multiple identity providers (such as Entra ID and GitHub), different server types (remote, local, and dual-purpose), and a focus on demonstrating authentication processes according to the latest Model Context Protocol standards.

Where to use

mcp-auth-servers can be used in software development, particularly in applications requiring secure authentication and authorization. They are suitable for both enterprise environments and public-facing applications.

Content

[!IMPORTANT]
This is now moved under one of the official Microsoft-supported GitHub organizations. Please use that repository as a point of reference.

🔒 MCP Server Authentication Reference Collection

Reference servers that demo how authentication works with the current Model Context Protocol spec.

[!WARNING]
Code presented here is for demo purposes only. Your specific scenarios (including rules inside your enterprise, specific security controls, or other protection mechanisms) may differ from the ones that are outlined in this repository. Always conduct a security audit and threat modeling for any production and customer-facing assets that require authentication and authorization.

Scenarios

Servers above are designed for various runtime scenarios. They are tagged as follows:

  • Remote MCP servers: Remote MCP Server
  • Local MCP servers: Local MCP Server
  • Dual-purpose MCP servers (can run locally or remotely): Dual-purpose MCP Server

Supported identity providers

Provider Scenario Server Type Implementation State
Entra ID Confidential client, mapped to session token. Dual-purpose MCP Server entra-id-cca-session State: Prototype
Entra ID Public client, using WAM Local MCP Server entra-id-local-wam State: Prototype
GitHub GitHub application w/OAuth, mapped to session token. Dual-purpose MCP Server github-app-session State: Prototype

Tools

No tools

Comments

Recommend MCP Servers

View All MCP Servers