Skip to main content
Glama
dend

Entra ID MCP Server Session Demo

by dend
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

🔒 Minimal Entra ID-authenticated MCP Server

Minimal server showing how to implement Entra ID authentication with MCP and HTTP+SSE transport. Unlike the previous server implementation, this relies on a confidential client living inside the MCP server, and then using "session mapping" to make sure that the client gets a session assignment through, what looks like, a JWT token (since we can't use cookies).

IMPORTANT

This repository has been archived. Refer to thereference collection for latest samples and best practices.

WARNING

This is not intended for production use. If you are to adopt any of the practices in this implementation, ensure that you are implementing proper caching and secure token/credential handling practices.

Run server

npm install
npm run build
npm run start

Related MCP server: basic-mcp-server

Testing

You will need to use MCP Inspector or a tool that supports HTTP+SSE transport for MCP servers and authentication.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • mcp_auth_server

    dawa
    F
    license
    Not graded
    quality
    D
    maintenance
    A proof-of-concept MCP server implementing OAuth 2.1 authorization with CIMD client registration and PKCE, demonstrating protected resource access and step-up authentication.
    -

  • mcp-server-entra-example

    connextai
    F
    license
    Not graded
    quality
    C
    maintenance
    A minimal, well-commented MCP server that authenticates its callers with Microsoft Entra ID (Azure AD).
    -

  • mcp-auth-poc

    360XView
    F
    license
    Not graded
    quality
    D
    maintenance
    A minimal MCP server with token-based authentication and SSE transport, providing greeting and echo tools for testing authentication patterns in remote MCP servers.
    -