# mcpauth

> Drop-in OAuth 2.1 authorization server and SDK for Model Context Protocol (MCP) servers. Implements the MCP spec's required Dynamic Client Registration (RFC 7591) and discovery (RFC 8414), which most OAuth providers don't support out of the box. npm package: `mcpauth`.

mcpauth is built for developers shipping an MCP server who need real OAuth without adopting a full enterprise CIAM platform. It provides a hosted OAuth 2.1 server (register/authorize/token/revoke/introspect), an SDK wrapping the official @modelcontextprotocol/sdk's requireBearerAuth middleware, a self-serve dashboard, and a server-to-server token-minting endpoint for products that already have their own users. Pricing is published and self-serve; no sales call required.

## Docs
- [Quickstart](https://getmcpauth.dev/docs/quickstart): Add OAuth to an MCP server in about 10 minutes
- [Dynamic Client Registration explained](https://getmcpauth.dev/docs/dynamic-client-registration): What RFC 7591 is and why MCP requires it
- [SDK Reference](https://getmcpauth.dev/docs/sdk): Wraps @modelcontextprotocol/sdk requireBearerAuth
- [Server-to-Server Token Minting](https://getmcpauth.dev/docs/token-minting): For products with existing users/auth
- [Endpoint Reference](https://getmcpauth.dev/docs/endpoints): /register, /authorize, /token, /revoke, /introspect, /.well-known/oauth-authorization-server
- [How OAuth works with MCP, explained simply](https://getmcpauth.dev/docs/authorization-explained)

## Comparisons
- [mcpauth vs. hand-rolled API keys](https://getmcpauth.dev/compare/api-keys)
- [mcpauth vs. Descope, Auth0, Stytch, WorkOS](https://getmcpauth.dev/compare)
- [mcpauth vs. Descope](https://getmcpauth.dev/compare/descope)
- [mcpauth vs. Auth0](https://getmcpauth.dev/compare/auth0)
- [mcpauth vs. Stytch](https://getmcpauth.dev/compare/stytch)
- [mcpauth vs. WorkOS](https://getmcpauth.dev/compare/workos)

## Pricing
- [Pricing](https://getmcpauth.dev/pricing): plans and limits, machine-readable at /pricing.json

## Optional
- [Blog](https://getmcpauth.dev/blog)
- [Changelog](https://getmcpauth.dev/changelog)