Skip to main content
Glama
deenesjakoruzh
AIBiz-Automatyzacje

oferty-spike-mcp

by AIBiz-Automatyzacje
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Remote

oferty-spike-mcp

项目 „Oferty Online" 的 Spike #1：Supabase Auth（测试版）内置的 OAuth 2.1 服务器能否通过 Dynamic Client Registration 与 Claude 应用对接。

代码仅供丢弃。 零测试，除 spike 自身诊断外零错误处理，零真实 MCP 工具。完成后只留下一份结论笔记。

这里有什么

文件

作用

src/server.js

HTTP 路由、Host 校验、懒认证、发现

src/mcp.js

MCP v2 服务器 + 返回令牌身份的 ping() 工具

src/verifier.js

两条路径：静态 Bearer（Claude Code）和 Supabase 令牌（Claude 应用）

src/consent.js

同意页面——唯一我们自己写的东西

src/supabase-metadata.js

启动时获取 AS 元数据，快速失败

我们使用 SDK v2（@modelcontextprotocol/server + @modelcontextprotocol/node）。 @modelcontextprotocol/sdk 是旧版 v1——网上大多数教程描述的都是它。

Related MCP server: Remote MCP Server on Cloudflare

环境变量

见 .env.example。四个都是必需的，没有它们进程不会启动。

本地运行

npm ci
APP_ORIGIN=http://localhost:3000 SUPABASE_URL=https://twoj.supabase.co \
  SUPABASE_ANON_KEY=... SPIKE_STATIC_TOKEN=... npm start

端点

  • POST /mcp — Streamable HTTP，无状态

  • GET /.well-known/oauth-protected-resource/mcp — RFC 9728

  • GET /.well-known/oauth-authorization-server — Supabase 元数据，原样传递

  • GET /oauth/consent?authorization_id=… — 同意页面

  • GET /healthz — 进程存活性，故意不 ping Supabase

诊断

不带令牌调用 POST /mcp 时返回 401，带有 WWW-Authenticate 头指向 Protected Resource Metadata——由此可以判断懒认证是否生效。

若怀疑连接器重连问题（spike 中最可疑的点）， supabase.auth.oauth.listGrants() 和 revokeGrant({ clientId }) 很实用——它们能 查看和删除已保存的同意，而无需手动操作数据库。

This server cannot be installed

F
license - not found
Not graded
quality - not tested
B
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • lighthouse-mcp-oauth

    Ulaklar
    F
    license
    Not graded
    quality
    B
    maintenance
    Enables Claude.ai to connect to a Hermes MCP server via OAuth 2.1 authorization code flow with PKCE, acting as a reverse proxy and single-user authorization gateway.

  • Remote MCP Server on

    berndgill
    F
    license
    Not graded
    quality
    C
    maintenance
    Enables remote MCP server deployment on Cloudflare Workers with OAuth login, supporting tool calling via SSE from clients like MCP Inspector or Claude Desktop.

  • mcp-oauth-server-next

    ctalau
    F
    license
    Not graded
    quality
    B
    maintenance
    A proof-of-concept HTTP MCP server requiring OAuth 2.0 authentication before tool use. Demonstrates the full authentication flow with Claude Code, including discovery, client registration, PKCE authorization, and bearer token verification.

View all related MCP servers

Related MCP Connectors

  • secureflows-mcp-server

    MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

  • Supabase

    MCP server for interacting with the Supabase platform

  • wallet-verifier-mcp

    MCP server for verifying EUDI/Talao wallet data via OIDC4VP (pull) for AI agents.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AIBiz-Automatyzacje/oferty-spike-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server