MCP Catalogs
← Homemcp-auth screenshot

mcp-auth

by famma-ai·★ 26·Score 41

SDK for building OAuth-protected Remote MCP servers on Cloudflare Workers with pluggable auth adapters.

securitydeveloper-toolsops-infra
2
Forks
0
Open issues
7 mo ago
Last commit
2d ago
Indexed

Overview

The mcp-auth SDK provides a solution for developers building MCP servers that require user authentication. It acts as a reverse proxy handling OAuth flows while allowing the actual MCP implementation to focus on its core functionality. The SDK is designed specifically for Cloudflare Workers deployment and comes with a Supabase adapter pre-implemented, with a clear interface for implementing custom auth adapters.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

you:Protecting MCP servers that need user-specific access controls
you:Adding OAuth authentication to MCP agents deployed on Cloudflare Workers
you:Implementing custom authentication flows when identity providers lack OAuth 2.1 support
you:What Cloudflare Workers compatibility is required?
you:Can I use this with identity providers other than Supabase?

When to choose this

Choose this when you need to deploy an MCP server on Cloudflare Workers and require OAuth authentication, especially when your identity provider doesn't offer native OAuth 2.1 support.

When NOT to choose this

Don't choose this if you're not using Cloudflare Workers for deployment, or if your identity provider already has native OAuth 2.1 support that you can integrate directly.

Comparable tools

oauth2-mcpauth0-mcpsupabase-mcpcustom-oauth-wrapper

Installation

npm install @famma/mcp-auth

For Claude Desktop integration, add to claude_desktop_config.json:

{
  "mcpServers": {
    "auth-protected-mcp": {
      "command": "npx",
      "args": ["@famma/mcp-auth"],
      "env": {
        "SUPABASE_URL": "your-supabase-url",
        "SUPABASE_ANON_KEY": "your-supabase-key",
        "PROXY_TARGET_URL": "your-mcp-server-url"
      }
    }
  }
}

FAQ

What Cloudflare Workers compatibility is required?
Requires compatibility_date '2025-03-10' or newer, Wrangler v4.42+ with nodejs_compat flag, and a configured KV namespace named 'OAUTH_KV'.
Can I use this with identity providers other than Supabase?
Yes, the SDK provides an AuthAdapter interface that you can implement to integrate with any authentication provider.

Compare mcp-auth with

mcp-auth vs mcp-server-chartmcp-auth vs everythingmcp-auth vs filesystemmcp-auth vs timemcp-auth vs sequentialthinking
GitHub →

Last updated · Auto-generated from public README + GitHub signals.