demo-mcp-server
demo-mcp-server
一个临时性的 MCP 服务器与客户端元数据文档,用于在开发过程中端到端地演练 OAuth 授权流程。这里没有任何生产代码。
服务器
src/ 通过 streamable HTTP 提供 MCP 服务,并受 Auth0 签发的 Bearer 令牌保护:
路径 | 行为 |
| MCP 端点。未认证的请求会收到 |
| RFC 9728 受保护资源元数据 |
令牌根据租户的 JWKS 对 iss、exp 和 aud 进行校验;未指明任何组织的令牌将被拒绝:没有组织,就不存在可供工作的团队边界。两个工具要求不同的 scope——whoami 需要 mcp:read,并报告令牌所携带的身份;echo 需要 mcp:write——因此 scope 不足的调用会产生真实的 403,并附带 insufficient_scope。
nvm use 22 && npm install
npm run dev设置位于 src/config.ts 中,每一项都可以通过环境变量覆盖。资源标识符必须与客户端实际连接的 URL 一致;如果元数据文档指明的是其他任何内容,客户端将拒绝该文档。
Related MCP server: MCP Server OAuth Toy
元数据文档
docs/client.json 通过 GitHub Pages 发布,其 URL 就是客户端的 client_id,依据 OAuth Client ID Metadata Document 和 MCP client registration。
重定向 URI 采用 MCP Inspector 的默认值:CLI 和 TUI 使用端口 6276,Web 客户端使用端口 6274。
此仓库是公开的,因为授权服务器需要匿名获取该文档。其中不包含任何配置或凭据。
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceMinimal MCP server for testing SkyStage's self-auth auto-detection feature. It includes tools like ping, echo, server_info, and read_secret, and uses a mock OAuth provider for login.
- FlicenseNot gradedqualityDmaintenanceA simple MCP server with OAuth 2.0 authentication for testing OAuth support in mcp-cli.
- FlicenseNot gradedqualityBmaintenanceA simple HTTP-based MCP server that provides demo tools (get_test_string, echo, check_maintenance), greeting prompts, and test resources, with optional OAuth 2.1 support.
- FlicenseNot gradedqualityBmaintenanceA configurable OAuth 2.0 authorization server and OAuth-protected MCP server for end-to-end testing of OAuth-protected MCP flows, including failure injection and control plane.
Related MCP Connectors
Streamable HTTP MCP server for Google Calendar and Sheets with OAuth login.
An authenticated remote MCP server for user-owned devices and one-shot capability invocation.
Self-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/chingyangtseng-houzz/demo-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server