AI导哈

OAuth服务器

一个通用的模型上下文协议（MCP）服务器，内置OAuth 2.0/2.1支持，提供强大的身份验证功能，适用于构建需要安全认证的MCP服务器。

  • by dnikolayev
  • Python
  • 本地部署
  • 更新于
在 GitHub 查看 dnikolayev/mcp-oauth-server

使用说明

MCP OAuth Server for ChatGPT, Gemini, Claude and other MCP clients

A generic implementation of a Model Context Protocol (MCP) server with built-in OAuth 2.0/2.1 support. It provides a solid foundation for building MCP servers that require robust authentication, whether acting as an OAuth 2.0/2.1 client to an upstream API or serving as a standalone authenticated agent.

Compatible with: ChatGPT, Gemini, Claude, and other MCP-compliant clients.

Features

  • OAuth 2.0/2.1 Support: Built-in support for Authorization Code flow with PKCE (compliant with OAuth 2.1 best practices), Client Credentials, and token management.
  • Generic Tools: Comes with example tools (echo, add) and a structure to easily add your own.
  • FastMCP & Sanic: Built on top of mcp (FastMCP) and sanic for high-performance async HTTP serving.
  • Storage: Pluggable storage backends (Redis, PostgreSQL, Memory) for sessions and token storage.
  • Configuration: Fully configurable via environment variables (MCP_SERVER_*).

Quick Start (local)

python3.14 -m venv venv && source venv/bin/activate
pip install -r requirements.txt
cp .env.example .env  # Adjust variables
python manage.py serve --debug

Default MCP endpoint: http://127.0.0.1:8042/mcp

Docker

docker build -t mcp-oauth-server .
docker run --rm -p 8080:8080 mcp-oauth-server

Tools

Includes basic tools for demonstration:

  • healthcheck(): Checks server health.
  • echo(message): Echoes back the message.
  • add(a, b): Adds two numbers.

Extend mcp_oauth_server/mcp_server.py to add your own business logic tools.

Configuration

See Configuration.md for a detailed list of environment variables.

Project Structure

  • mcp_oauth_server/: Source code.
    • mcp_server.py: MCP tool definitions and server logic.
    • http_server.py: Sanic web server wrapper (handles OAuth, health, serving MCP).
    • config.py: Application configuration (Pydantic settings).
    • auth.py / session_store.py: Authentication and session management.
  • tests/: Unit tests.

Testing

The project maintains high standards for code quality and reliability, with 100% test coverage across core modules.

To run the full test suite:

./test.sh

This script runs:

  • Pytest: Unit and integration tests with pytest-asyncio and pytest-cov.
  • Flake8: Code style enforcement.
  • Isort: Import sorting checks.
  • Pylint: Static code analysis.

The test suite covers:

  • OAuth Flows: Authorization Code, PKCE, Client Credentials.
  • HTTP Server: Endpoints, error handling, redirect logic.
  • Storage Backends: In-memory, Redis, and mocked PostgreSQL interactions.
  • Configuration: Environment variable parsing and validation.
  • Cookie Authentication: Default and custom token extractors.

License

MIT

相关 MCP