Terms of Service

Last updated: July 1, 2026

These terms cover your use of mcpauth (the dashboard at getmcpauth.dev and the OAuth 2.1 / Dynamic Client Registration endpoints it hosts for your MCP server). By creating an account or using the service, you agree to these terms.

What mcpauth is

mcpauth is a hosted OAuth 2.1 authorization server with Dynamic Client Registration (RFC 7591), built specifically for MCP servers. You register a Project pointing at your MCP server, and mcpauth handles client registration, authorization, token issuance, introspection, and revocation on your behalf.

Accounts

You sign in with GitHub. You're responsible for keeping your GitHub account secure and for all activity under your mcpauth account, including any Projects, Clients, and tokens created through it.

Plans and billing

Free and Pro plan details, limits, and pricing are listed at /pricing. Pro is a recurring monthly subscription billed through Stripe. By subscribing, you authorize mcpauth to charge your payment method each billing period until you cancel. You can cancel anytime from the dashboard's billing portal — you'll keep Pro access through the end of the period you've already paid for, and you won't be charged again after that. We don't currently offer prorated refunds for a partial billing period.

mcpauth never sees or stores your card details — Stripe handles payment collection directly.

Acceptable use

Use mcpauth to authenticate real MCP clients against your own Projects. Don't use it to attack, abuse, or degrade the service — including flooding the registration or token endpoints, attempting to bypass rate limits or plan limits, or using a registration secret you don't own.

Automated abuse (e.g. sustained rate-limit violations) may be throttled or blocked immediately and without notice, since that's the rate limiter working as designed. For anything beyond that — suspending or terminating an account — we'll email the address on file explaining why before taking action, except where we reasonably believe waiting would cause ongoing harm (e.g. active abuse of other users' Projects). If you think an enforcement action was a mistake, reply to that email or reach us through the channel in Contact below and we'll review it.

Your data and content

You own the Projects, Clients, and data you create through mcpauth. We store it to operate the service — see the Privacy Policy for what we collect and why. You're responsible for what your MCP server does with the tokens mcpauth issues.

Service availability

We aim to keep mcpauth reliably available, but this is a young service and we don't currently offer an uptime SLA. We'll do our best to give notice before any planned downtime or breaking change to the hosted endpoints.

Termination

You can stop using mcpauth and cancel your subscription at any time. We may suspend or terminate accounts that violate these terms, including abusive use of the API. If we discontinue the service entirely, we'll give reasonable advance notice so you can migrate.

Disclaimer and limitation of liability

mcpauth is provided “as is,” without warranties of any kind, express or implied. To the maximum extent permitted by law, mcpauth and its operator aren't liable for any indirect, incidental, or consequential damages arising from your use of the service, and total liability for any claim is limited to the amount you paid mcpauth in the twelve months before the claim arose.

Changes to these terms

We may update these terms as the service changes. We'll update the “Last updated” date above when we do; continued use after a change means you accept the updated terms.

Governing law and disputes

These terms are governed by applicable United States law, without regard to conflict-of-law principles. Before filing a claim against mcpauth, you agree to first contact us (see Contact below) and give us 30 days to resolve the issue informally — most disagreements with a small service like this one are much faster to sort out directly than through a formal process.

Contact

Questions about these terms? Open an issue on the SDK repository.