mcp-auth-proxy
Provides an OAuth-authenticated stdio-to-HTTP proxy for connecting AI clients to remote GitHub MCP servers, including OAuth discovery, PKCE login, and silent token refresh.
Provides an OAuth-authenticated proxy for connecting AI clients to remote Linear MCP servers, with automatic OAuth discovery, dynamic client registration, and background token refresh.
Provides an OAuth-authenticated proxy for connecting AI clients to remote Notion MCP servers, handling PKCE authorization and silent token refresh.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
@thuyphuocthinh/mcp-auth-proxy π
Zero-config Stdio to Streamable HTTP MCP runtime proxy with automatic OAuth 2.0 PKCE discovery & silent token refresh.
mcp-auth-proxy acts as a zero-config bridge between your AI Client (Google Antigravity, Cursor, Windsurf, Claude Code, VS Code Copilot) and any remote Model Context Protocol (MCP) server protected by OAuth 2.0 (e.g., 200Lab AI Tutor, Notion, Linear, GitHub).
π Highlights
π Zero Runtime Dependencies: Pure Node.js (
node:http,node:crypto,node:net), lightweight, launches immediately vianpx.π Automated OAuth Discovery: Intercepts
401 Unauthorized, parsesWWW-Authenticate: Bearer resource_metadata="..."and resolves.well-knownendpoints automatically.π Dynamic Client Registration (RFC 7591) & PKCE (RFC 7636): Automatically registers client IDs on the fly with S256 challenge, eliminating the need for hardcoded client secrets.
π Cross-Platform Auto Browser Launch: Automatically opens default browser on Windows (
start), macOS (open), and Linux (xdg-open).π Silent Background Refresh: Automatically renews expiring tokens in the background via
grant_type=refresh_tokenbefore the 5-minute expiry threshold.π‘οΈ Static Header Bypass: Support for
--headerflag to pass static API keys or personal access tokens directly.π¦ Dynamic Port Selection: Automatically scans for free local ports starting from
8080(8081, 8082...), eliminatingEADDRINUSEport collision errors.
Related MCP server: Cartena MCP Server
π¦ Usage
1. Antigravity / Cursor Configuration
Add this entry to your mcp_config.json or claude_desktop_config.json:
{
"mcpServers": {
"200lab-ai-tutor": {
"command": "npx",
"args": [
"-y",
"@thuyphuocthinh/mcp-auth-proxy",
"https://mcp.200lab.io/mcp/learner"
]
}
}
}On first launch, your browser will automatically pop up to approve authorization. Subsequent launches will run silently forever with automatic token refresh!
2. CLI Options
npx @thuyphuocthinh/mcp-auth-proxy <remote-url> [options]Option | Description |
| Pre-configured Client ID (for servers without RFC 7591 dynamic registration) |
| Custom request header (e.g. bypass OAuth with static API key) |
| Disable automatic browser launch; prints login URL to stderr (for headless/VPS environments) |
| Perform interactive OAuth authentication, save credentials, and exit |
| Display help instructions |
| Display version number |
π§ͺ Testing
npm run build
npm test49 unit tests covering all core modules with 100% pass rate.
π License
MIT Β© Thuy Phuoc Thinh
This server cannot be deployed
Maintenance
Related MCP Connectors
StremAI MCP: shared memory for AI coding agents. Connected agents can recall. OAuth + local stdio.
Remote streamable-HTTP MCP server running on a single Cloudflare Worker. Your assistant gets live Airbnb, Amazon, Booking.com, Google Flights, Maps and Reddit data, social search on X, Instagram and TikTok, the Meta Ad Library, and image/video generation without any keys. Connect your own accounts to let it send WhatsApp or Telegram messages, work an IMAP inbox, manage Meta Ads campaigns and publish to X and LinkedIn. OAuth 2.1 with PKCE; stored credentials are AES-256-GCM encrypted.
Talk to your public-facing AI from any MCP client β Claude, ChatGPT, Cursor, Cline, Windsurf.
The Stytch MCP server is a reference implementation that demonstrates remote MCP server authentication and authorization using Stytch Connected Apps. It provides OAuth 2.1-compliant authorization (including PKCE), Dynamic Client Registration, and validates Stytch-issued access tokens to enable AI agents to securely interact with external services through permissioned access, supporting scopes like openid, email, profile, and manage:project_data.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceBridges stdio-based LLM harnesses to OAuth-protected remote MCP servers via Streamable HTTP, handling PKCE browser login and token refresh automatically.5 npmMIT
- FlicenseNot gradedqualityCmaintenanceEnables AI clients like Claude to interact with Cartena tools via MCP, supporting remote OAuth or local stdio authentication.-
- AlicenseNot gradedqualityAmaintenanceBridge that lets stdio-only MCP clients connect to remote MCP servers with OAuth and other auth support, enabling local clients to use remote, authorized MCP servers.53 npm54MIT
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to connect to remote servers that have OAuth issuer mismatches (e.g., OutSystems) by relaying stdio and handling OAuth flows with optional issuer override.9 npmMIT