Docs

Everything you need to add OAuth 2.1 and Dynamic Client Registration to an MCP server with mcpauth.

• Quickstart

  Add OAuth to your MCP server in about 10 minutes.

• Dynamic Client Registration (RFC 7591)

  What DCR is, why MCP requires it, and why most OAuth providers don't support it.

• SDK reference

  The mcpauth npm package: mcpAuth(), McpAuthTokenVerifier, mintToken(), and resource metadata helpers.

• Server-to-server token minting

  For MCP servers embedded in a product that already has its own users.

• Endpoint reference

  HTTP reference for /register, /authorize, /token, /revoke, /introspect, and RFC 8414 discovery.

• How OAuth works with MCP

  A plain-language walkthrough for developers new to OAuth.

• Tutorials

  Hands-on walkthroughs — start with building a per-user todo manager.