A production-ready MCP server that authenticates agents via OAuth 2.1 Bearer tokens, validates JWTs with JWKS, enforces tool-level scopes and roles, and logs the full delegation chain.
Enables an MCP server with OAuth authentication, protecting tools like user CRUD operations behind session tokens obtained through a browser-based authentication flow.
Enables an MCP client to act as a pure OAuth 2.0 protected resource, validating Keycloak-issued tokens via JWKS and exposing tools to inspect caller token claims, list realm clients, and retrieve client metadata, with support for Client ID Metadata Documents.