demo-mcp-server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@demo-mcp-serverecho 'OAuth test'"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
demo-mcp-server
A throwaway MCP server and client metadata document, used to exercise OAuth authorization end to end during development. Nothing here is production code.
The server
src/ serves MCP over streamable HTTP behind Auth0-issued bearer tokens:
Path | Behaviour |
| MCP endpoint. Unauthenticated requests get |
| RFC 9728 protected resource metadata |
Tokens are verified against the tenant JWKS on iss, exp and aud, and a
token naming no Organization is refused: without one there is no team boundary
to work within. Two tools demand different scopes — whoami needs mcp:read
and reports the identity the token carried, echo needs mcp:write — so an
under-scoped call produces a real 403 with insufficient_scope.
nvm use 22 && npm install
npm run devSettings live in src/config.ts and every one is overridable by environment
variable. The resource identifier must equal the URL clients actually connect
to; clients reject a metadata document that names anything else.
Related MCP server: MCP Server OAuth Toy
The metadata document
docs/client.json is published via GitHub Pages and its URL is the client's
client_id, per
OAuth Client ID Metadata Document
and
MCP client registration.
The redirect URIs are MCP Inspector defaults: port 6276 for the CLI and TUI, port 6274 for the web client.
This repository is public because an authorization server fetches the document anonymously. It contains no configuration or credentials.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceMinimal MCP server for testing SkyStage's self-auth auto-detection feature. It includes tools like ping, echo, server_info, and read_secret, and uses a mock OAuth provider for login.
- FlicenseNot gradedqualityDmaintenanceA simple MCP server with OAuth 2.0 authentication for testing OAuth support in mcp-cli.
- FlicenseNot gradedqualityBmaintenanceA simple HTTP-based MCP server that provides demo tools (get_test_string, echo, check_maintenance), greeting prompts, and test resources, with optional OAuth 2.1 support.
- FlicenseNot gradedqualityBmaintenanceA configurable OAuth 2.0 authorization server and OAuth-protected MCP server for end-to-end testing of OAuth-protected MCP flows, including failure injection and control plane.
Related MCP Connectors
Streamable HTTP MCP server for Google Calendar and Sheets with OAuth login.
An authenticated remote MCP server for user-owned devices and one-shot capability invocation.
Self-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/chingyangtseng-houzz/demo-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server