mcp-use-aps-example
mcp-use + APS 授权示例
此独立示例将 Agent Passport System 的 aps-mcp-1 配置放在现有 mcp-use TypeScript 中间件接缝之后。网关代理 vault_echo 工具,并在 next() 到达上游服务器之前验证已签名的一次性授权信封。
运行
npm install
npm test
npm run dev打开打印的 URL 以使用内置的 mcp-use Inspector。
使用一条消息调用
issue_aps_demo_grant。将其结构化结果复制到
vault_echo。运行
vault_echo;APS 中间件会在分发前验证签名、目标、参数哈希、过期时间、作用域和重放状态。再次运行相同的请求,观察上游被调用前的重放拒绝。
Related MCP server: auth0-3lo-mcp-server
Inspector 兼容性
APS MCP 配置通常会在以下位置携带其信封:
tools/call.params._meta["org.agent-passport/authorization"]当前的 Inspector 表单不暴露任意的每次调用 _meta。仅用于交互式演示,此仓库接受以 apsAuthorization 工具参数形式传入的相同信封,在中间件内部将其移入带命名空间的 _meta 条目,并在转发前将其移除。生产环境中的 MCP 客户端应直接发送 _meta。
此 localhost 演示还假定传输层认证已经建立。生产代码必须配置 OAuth,并从已验证的传输上下文(ctx.auth)中推断出这一点。
APS 是一个独立的第三方项目,不属于 MCP 或 mcp-use 的一部分。
This server cannot be deployed
Maintenance
Related MCP Connectors
Issue Agent Passports and verify agent authority before value moves. Signed verification records.
Scoped agent execution. Server-side credentials, policy, budgets and verifiable receipts.
Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAuthenticating reverse proxy for MCP servers providing credential isolation, OAuth2 token management, and composite tool aggregation.BSD Zero Clause
- FlicenseNot gradedqualityCmaintenanceDemonstrates the AgentCore Gateway 3-Legged OAuth flow with Auth0, exposing whoami and echo tools for end-to-end authorization code testing.-
- AlicenseNot gradedqualityBmaintenanceEnables agents to self-provision tenancies via a single tool call and then publish, list, inspect, call, and remove their own echo, HTTP, and Python tools at runtime, with per-tenant namespaces, stateless streamable-HTTP transport, and admin metering.Apache 2.0
- AlicenseNot gradedqualityBmaintenanceProvides a policy-controlled MCP gateway that lets agents invoke tools with explicit policies, bounded execution, scoped visibility, and decision receipts.MIT