mcp-auth: open-source auth layer plugs MCP servers into existing identity providers
BeautifulFeature3650 · reddit · 2026-09-21
The maintainer of mcp-runtime released mcp-auth, an open-source authorization server for MCP that solves the auth headaches of taking MCP servers beyond local demos: token validation, scopes, OAuth discovery, PKCE, token exchange, and proper error handling.
The core idea: connect mcp-auth to the identity provider your organization already uses — no need to replace existing identity systems or create a separate user set for MCP. It handles the MCP-specific authorization flow between your IdP, MCP clients, and MCP servers.
- Ships SDKs and working server examples for Python, TypeScript, and Go, all validated against the same end-to-end authorization tests
- Bundled with mcp-runtime but can run standalone with your own MCP infrastructure
More from coding & agent
- Addy Osmani shows Claude Code can auto-evaluate whether a plugin improves answers — addyosmani · 2026-09-21
- Devs say avoiding cache misses could boost Claude Code/Codex effective usage limits 10-20% — chaseleantj · 2026-09-21
- Solo dev's open-source AI workflow platform hits 38 deployments, now faces maintenance questions — Feathered-Beast · 2026-09-21
- Where should agent action authorization live? AI support teams debate refund safety policies — witty_queen123 · 2026-09-21
- Two years from learning Claude Code to $35k freelance income and a failed first startup — PratikKadam_ · 2026-09-21
- ostris ai-toolkit ships Qwen-Image-2.1 LoRA training support, no community LoRAs yet — reeight · 2026-09-21