ottoauthMCP

Standalone MCP stdio server that proxies tool calls to Ottoauth HTTP endpoints.

Features

• Discovers service endpoints from GET /api/services docs.

• Registers dynamic MCP tools per endpoint.

• Refreshes discovered tools once every hour.

• Includes a generic passthrough tool: ottoauth_http_request.

• Includes a built-in account creation tool: ottoauth_create_account.

• Runs an Ottoauth webhook receiver and relays incoming events to an agent gateway with retries.

Related MCP server: SentinelX Core MCP

Run

npm install
OTTOAUTH_BASE_URL=http://localhost:3000 npm start

Webhook receiver defaults:

• host: 127.0.0.1

• port: 3789

• path: /webhooks/ottoauth

Important env vars:

• OTTOAUTH_WEBHOOK_SECRET (recommended; validates x-ottoauth-signature)

• OTTOAUTH_WEBHOOK_ALLOW_UNSIGNED=1 (dev only)

• OTTOAUTH_WEBHOOK_PORT / OTTOAUTH_WEBHOOK_HOST / OTTOAUTH_WEBHOOK_PATH

• AGENT_GATEWAY_URL (relay destination)

• AGENT_GATEWAY_AUTH_TOKEN (optional bearer token to gateway)

• WEBHOOK_RETRY_BASE_MS (default 2000)

• WEBHOOK_RETRY_MAX (default 8)

• WEBHOOK_EVENT_STORE_PATH (defaults to .ottoauth-webhook-events.json in cwd)

Tests

npm test

Test coverage includes:

• parser and normalization edge cases

• timeout and forwarding behavior

• webhook signature, dedupe, retries, dead-letter

• MCP stdio end-to-end flow

• integration test using simple demo agent script from neighboring autoauth repo

MCP client config example

{
  "mcpServers": {
    "ottoauth": {
      "command": "node",
      "args": ["/absolute/path/to/ottoauthMCP/src/index.mjs"],
      "env": {
        "OTTOAUTH_BASE_URL": "https://your-ottoauth-domain.com"
      }
    }
  }
}