A remote MCP server that lets clients authenticate through an external OIDC provider and search, read, and create per-user notes with verified JWTs, per-tool scopes, and 403 step-up challenges. Every tool call is authorized against a scope map and scoped to the token's subject, so no caller can reach another user's data.
Enables MCP clients to connect over stateless Streamable HTTP and authenticate through an existing OAuth 2.1 / OpenID Connect authorization server, with JWT validation, per-tool scope enforcement, and step-up challenges. It ships example scoped tools for reading and creating per-user notes that developers replace with their own.
A remote MCP server implementation that demonstrates authentication and authorization capabilities using OAuth 2.1. This is a workshop project for learning how to build secure MCP servers with user authentication.
A remote MCP server (Node.js/TypeScript) deployed on Azure Container Apps that provides todo list management tools with JWT authentication and role-based access control.