Open-sourcing cimd-proxy: connect MCP clients to any OIDC provider by URL alone
DerMozart · reddit · 2026-09-09
After wiring MCP auth against Claude, ChatGPT, Mistral and Grok, the author open-sourced cimd-proxy (Apache-2.0). Key findings: Claude needs both CIMD flags advertised or it silently falls back; ChatGPT ships non-draft fields that break strict parsers; Mistral re-registers per connection; Grok uses path-inserted metadata URLs; Keycloak's CIMD support is experimental and lacks RFC 8707 resource indicators required by MCP. The proxy presents an OAuth 2.1 facade, federates to your existing provider, never reads tokens (relay verbatim, refresh via sealed envelope, no server-side session), and allowlists metadata hosts against SSRF.
More from coding & agent
- GenRobotics launches Auto-Engineering on GRID to fully automate building and deploying robot intelligence — akapoor_av8r · 2026-09-10
- Self-host the whole planet's map with one 137.8 GB PMTiles file — dbreunig · 2026-09-10
- Greg Kamradt digs into gamedevbench: reference solutions edit 4.7 files, 114 lines on average — GregKamradt · 2026-09-10
- After Claude beat Pokemon FireRed, a harder benchmark built on ROM hack Radical Red — simonguozirui · 2026-09-10
- One prompt, full autonomous brand design: GPT Image's new sketch feature driven via Codex computer use — venturetwins · 2026-09-10
- Fireship built the same game with Astra and Fable 5.1 — only one was fun — Fireship · 2026-09-10