MCP Catalogs
Home

mcpaccess-auth0-express

by hivetrail-ai·0·Score 30

Auth0 authentication middleware for Express-based MCP servers with JWT validation and role-based access control.

securitydeveloper-toolsai-llm
0
Forks
0
Open issues
9 mo ago
Last commit
2d ago
Indexed

Overview

mcpaccess-auth0-express provides a straightforward way to integrate Auth0 authentication into Express-based MCP servers. It handles JWT verification using Auth0's public keys, implements role-based access control (RBAC) for fine-grained permissions, and integrates seamlessly with Express middleware. The package protects MCP endpoints for tools, resources, and prompts with minimal configuration, allowing developers to focus on their core MCP server logic rather than authentication handling.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

you:Securing enterprise MCP servers with Auth0 integration
you:Implementing role-based access control for different MCP tools
you:Protecting sensitive resources and prompts in production MCP environments

When to choose this

Choose this when building Express-based MCP servers that need enterprise-grade authentication with Auth0 integration and role-based access control.

When NOT to choose this

Don't choose this if you're not using Auth0 or building non-Express MCP servers, as it requires Auth0 integration and Express framework.

Comparable tools

express-auth-mcpjwt-auth-mcpoauth-mcp

Installation

npm i @hivetrail/mcpaccess-auth0-express

Configure the middleware with your Auth0 settings:

import { createMcpAccessMiddleware } from "@hivetrail/mcpaccess-auth0-express";

const mcpAccessConfig = {
  serverId: "mcp",
  mcpPath: "/mcp",
  jwtOptions: {
    issuerBaseURL: process.env.AUTH0_ISSUER_URL,
    audience: process.env.AUTH0_AUDIENCE
  },
};

const mcpAuthMiddleware = createMcpAccessMiddleware(mcpAccessConfig);

// Use in Express app
app.use(mcpAuthMiddleware);

Compare mcpaccess-auth0-express with

GitHub →

Last updated · Auto-generated from public README + GitHub signals.