Skip to content

Add OAuth 2.1 + PKCE + DCR authentication for MCP server#947

Draft
aaylward wants to merge 3 commits intomainfrom
mcp_oauth
Draft

Add OAuth 2.1 + PKCE + DCR authentication for MCP server#947
aaylward wants to merge 3 commits intomainfrom
mcp_oauth

Conversation

@aaylward
Copy link
Collaborator

Implement MCP Authorization Spec with full RFC compliance:

  • Server: JWT validation, audience checking (RFC 8707), protected resource metadata (RFC 9728)
  • Client: Dynamic client registration (RFC 7591), PKCE (RFC 7636), token management
  • Keycloak configuration and demo script

Auth is toggleable via MCP_OAUTH_ENABLED env var.

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Jan 18, 2026

Deploying moonbase-flippy-mem with  Cloudflare Pages  Cloudflare Pages

Latest commit: 1917a31
Status: ✅  Deploy successful!
Preview URL: https://8e476bd7.moonbase-4zv.pages.dev
Branch Preview URL: https://mcp-oauth.moonbase-4zv.pages.dev

View logs

  Implement MCP Authorization Spec with full RFC compliance:
  - Server: JWT validation, audience checking (RFC 8707), protected resource metadata (RFC 9728)
  - Client: Dynamic client registration (RFC 7591), PKCE (RFC 7636), token management
  - Keycloak configuration and demo script

  Auth is toggleable via MCP_OAUTH_ENABLED env var.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant