Generate HAP Personal Authorization MCP

Helps you obtain and update HAP personal authorization MCP configurations without manual OAuth processes.

Before the official launch of the HAP AI Connect feature (which will allow users to more easily connect HAP Skills, MCPs, and CLI with various AI tools), you can use this Skill to obtain/update your personal MCP and experience the value of HAP API (personal authorization) MCP.

What is HAP Personal Authorization

HAP provides a standard OAuth 2.0 authorization mechanism that allows users to authorize third-party applications to securely access or operate data in HAP as the user themselves. This is not only an upgrade in authorization methods but also key infrastructure for HAP's transition from "system capability opening" to "user-level capability opening."

1. Upgrade from "System Authorization" to "User Authorization" — Transitioning from "application permission execution" to "user identity execution."

2. Finer-grained permission control (Scope) — Minimizing permissions and specifying resource and operation scopes.

3. Short-lived credentials to reduce security risks — Tokens last for 1 day by default, are rotatable, and have limited impact if leaked.

4. Users can revoke authorization at any time — Permissions change from "non-recoverable" to controllable, revocable, and manageable.

5. Every call has a clear identity attribution — Supports auditing, compliance tracking, and user behavior analysis.

Related MCP server: RednoteMCP

User Guide

For detailed steps, see: Personal Permission MCP User Guide

What You Need to Prepare

Only your HAP account and password (email or mobile number login).

Install Skill

Claude Code

claude skill add --name hap-oauth-mcp https://github.com/garfield-bb/hap-oauth-mcp.git

Other AI Tools (Natural Language Installation)

Simply say in the chat:

Help me install this skill: https://github.com/garfield-bb/hap-oauth-mcp.git

How to Use

After installation, simply tell the AI:

Help me configure HAP personal MCP, account your@email.com, password xxx

The AI will automatically complete the login, OAuth authorization, and token retrieval, finally returning a configuration JSON that can be pasted directly into your MCP client:

{
  "HAP Personal MCP": {
    "url": "https://api2.mingdao.com/mcp?Authorization=Bearer <your_token>"
  }
}

If it is your first time authorizing, the AI will guide you to complete an OAuth confirmation in the browser. Subsequent token refreshes will not require further action.

Security Notice

All code is executed locally, and account passwords will not pass through any third-party services. Technical path: Local calls to the HAP login interface (using the same RSA encryption as the web version), followed by obtaining and refreshing tokens through the official OAuth integration interface.