protogrid
Sign inAdd to your agent

Search / io.github.brunovicco/mcp-server-auth-template

MCP Server Auth Template

L0· runs locally

OAuth 2.1/OIDC resource-server reference for secure MCP authorization

v0.7.0 · active · repository · website · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–not scored
Trust94of 100
Packages1
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "mcp-server-auth-template": {
      "command": "docker",
      "args": [
        "--read-only",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,nodev,size=16m",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges:true",
        "--publish",
        "127.0.0.1:8000:8000",
        "-e",
        "MCP_SERVER_RESOURCE_SERVER_URL",
        "-e",
        "MCP_SERVER_AUTH_PROVIDER",
        "-e",
        "MCP_SERVER_REQUIRED_SCOPES",
        "-e",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
        "-e",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
        "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
      ],
      "env": {
        "MCP_SERVER_RESOURCE_SERVER_URL": "${MCP_SERVER_RESOURCE_SERVER_URL}",
        "MCP_SERVER_AUTH_PROVIDER": "${MCP_SERVER_AUTH_PROVIDER}",
        "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
      }
    }
  }
}
claude mcp add mcp-server-auth-template -e "MCP_SERVER_RESOURCE_SERVER_URL=${MCP_SERVER_RESOURCE_SERVER_URL}" -e "MCP_SERVER_AUTH_PROVIDER=${MCP_SERVER_AUTH_PROVIDER}" -e "MCP_SERVER_REQUIRED_SCOPES=[\"mcp:tools:call\"]" -e "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS=[\"127.0.0.1:8000\"]" -e "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS=[]" -- docker --read-only --tmpfs /tmp:rw,noexec,nosuid,nodev,size=16m --cap-drop ALL --security-opt no-new-privileges:true --publish 127.0.0.1:8000:8000 -e MCP_SERVER_RESOURCE_SERVER_URL -e MCP_SERVER_AUTH_PROVIDER -e MCP_SERVER_REQUIRED_SCOPES -e MCP_SERVER_TRANSPORT_ALLOWED_HOSTS -e MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0
[mcp_servers.mcp-server-auth-template]
command = "docker"
args = ["--read-only", "--tmpfs", "/tmp:rw,noexec,nosuid,nodev,size=16m", "--cap-drop", "ALL", "--security-opt", "no-new-privileges:true", "--publish", "127.0.0.1:8000:8000", "-e", "MCP_SERVER_RESOURCE_SERVER_URL", "-e", "MCP_SERVER_AUTH_PROVIDER", "-e", "MCP_SERVER_REQUIRED_SCOPES", "-e", "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS", "-e", "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS", "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"]
env = { "MCP_SERVER_RESOURCE_SERVER_URL" = "${MCP_SERVER_RESOURCE_SERVER_URL}", "MCP_SERVER_AUTH_PROVIDER" = "${MCP_SERVER_AUTH_PROVIDER}", "MCP_SERVER_REQUIRED_SCOPES" = "[\"mcp:tools:call\"]", "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS" = "[\"127.0.0.1:8000\"]", "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS" = "[]" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcp-server-auth-template": {
      "type": "local",
      "command": [
        "docker",
        "--read-only",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,nodev,size=16m",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges:true",
        "--publish",
        "127.0.0.1:8000:8000",
        "-e",
        "MCP_SERVER_RESOURCE_SERVER_URL",
        "-e",
        "MCP_SERVER_AUTH_PROVIDER",
        "-e",
        "MCP_SERVER_REQUIRED_SCOPES",
        "-e",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
        "-e",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
        "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
      ],
      "enabled": true,
      "environment": {
        "MCP_SERVER_RESOURCE_SERVER_URL": "{env:MCP_SERVER_RESOURCE_SERVER_URL}",
        "MCP_SERVER_AUTH_PROVIDER": "{env:MCP_SERVER_AUTH_PROVIDER}",
        "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
      }
    }
  }
}
{
  "mcpServers": {
    "mcp-server-auth-template": {
      "command": "docker",
      "args": [
        "--read-only",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,nodev,size=16m",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges:true",
        "--publish",
        "127.0.0.1:8000:8000",
        "-e",
        "MCP_SERVER_RESOURCE_SERVER_URL",
        "-e",
        "MCP_SERVER_AUTH_PROVIDER",
        "-e",
        "MCP_SERVER_REQUIRED_SCOPES",
        "-e",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
        "-e",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
        "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
      ],
      "env": {
        "MCP_SERVER_RESOURCE_SERVER_URL": "${MCP_SERVER_RESOURCE_SERVER_URL}",
        "MCP_SERVER_AUTH_PROVIDER": "${MCP_SERVER_AUTH_PROVIDER}",
        "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcp-server-auth-template&config=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"
}
{
  "servers": {
    "mcp-server-auth-template": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "--read-only",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,nodev,size=16m",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges:true",
        "--publish",
        "127.0.0.1:8000:8000",
        "-e",
        "MCP_SERVER_RESOURCE_SERVER_URL",
        "-e",
        "MCP_SERVER_AUTH_PROVIDER",
        "-e",
        "MCP_SERVER_REQUIRED_SCOPES",
        "-e",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
        "-e",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
        "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
      ],
      "env": {
        "MCP_SERVER_RESOURCE_SERVER_URL": "${MCP_SERVER_RESOURCE_SERVER_URL}",
        "MCP_SERVER_AUTH_PROVIDER": "${MCP_SERVER_AUTH_PROVIDER}",
        "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
      }
    }
  }
}
{
  "mcpServers": {
    "mcp-server-auth-template": {
      "command": "docker",
      "args": [
        "--read-only",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,nodev,size=16m",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges:true",
        "--publish",
        "127.0.0.1:8000:8000",
        "-e",
        "MCP_SERVER_RESOURCE_SERVER_URL",
        "-e",
        "MCP_SERVER_AUTH_PROVIDER",
        "-e",
        "MCP_SERVER_REQUIRED_SCOPES",
        "-e",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
        "-e",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
        "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
      ],
      "env": {
        "MCP_SERVER_RESOURCE_SERVER_URL": "${MCP_SERVER_RESOURCE_SERVER_URL}",
        "MCP_SERVER_AUTH_PROVIDER": "${MCP_SERVER_AUTH_PROVIDER}",
        "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]",
        "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]",
        "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
      }
    }
  }
}
extensions:
  "mcp-server-auth-template":
    enabled: true
    name: "mcp-server-auth-template"
    type: stdio
    cmd: "docker"
    args:
      - "--read-only"
      - "--tmpfs"
      - "/tmp:rw,noexec,nosuid,nodev,size=16m"
      - "--cap-drop"
      - "ALL"
      - "--security-opt"
      - "no-new-privileges:true"
      - "--publish"
      - "127.0.0.1:8000:8000"
      - "-e"
      - "MCP_SERVER_RESOURCE_SERVER_URL"
      - "-e"
      - "MCP_SERVER_AUTH_PROVIDER"
      - "-e"
      - "MCP_SERVER_REQUIRED_SCOPES"
      - "-e"
      - "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS"
      - "-e"
      - "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS"
      - "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0"
    envs:
      "MCP_SERVER_RESOURCE_SERVER_URL": "${MCP_SERVER_RESOURCE_SERVER_URL}"
      "MCP_SERVER_AUTH_PROVIDER": "${MCP_SERVER_AUTH_PROVIDER}"
      "MCP_SERVER_REQUIRED_SCOPES": "[\"mcp:tools:call\"]"
      "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS": "[\"127.0.0.1:8000\"]"
      "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS": "[]"
    timeout: 300

This is a local package: the command runs on your machine.

Quality – / 100not scored

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-10-20 11:40 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance90
livenessn/a
freshness100
hygiene95

+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-27d-ago -unpinned-packages(1)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

packageregistryversionruntimesecrets
ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0ociunpinneddocker

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

  • mcp-server-templateL0
    io.github.qmmughal/mcp-server-template

    Production-grade MCP Server Template for TypeScript and Node.js.

  • Security McpR2quality 100
    io.github.varvararatta/security_mcp

    MCP server for Security

  • opencodeR1
    io.github.doc2mcp/opencode

    MCP server for opencode documentation, generated by doc2mcp.

  • Template MCP ServerL0
    com.microsoft/template-server-name

    Template MCP server example.

  • agentresources-mcpL0
    io.github.sznt2010/agentresources-mcp

    MCP server for Agent Resources: Trust Cards, signed telemetry, ERC-8004 identity, x402.

  • MCP Server AttestationL0
    io.studiomeyer/server-attestation

    Ed25519-signed MCP tool manifests + spawn attestation. Layer-2 supply-chain hardening.

More from io.github.brunovicco

  • openfinance-br-mcpL0
    io.github.brunovicco/openfinance-br-mcp

    Secure Open Finance Brasil MCP server with typed tools and a credential-free mock mode

Official server.json
{
  "name": "io.github.brunovicco/mcp-server-auth-template",
  "title": "MCP Server Auth Template",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.7.0",
  "packages": [
    {
      "transport": {
        "url": "http://127.0.0.1:8000/mcp",
        "type": "streamable-http"
      },
      "identifier": "ghcr.io/brunovicco/mcp-server-auth-template:v0.7.0",
      "runtimeHint": "docker",
      "registryType": "oci",
      "runtimeArguments": [
        {
          "name": "--read-only",
          "type": "named"
        },
        {
          "name": "--tmpfs",
          "type": "named",
          "value": "/tmp:rw,noexec,nosuid,nodev,size=16m"
        },
        {
          "name": "--cap-drop",
          "type": "named",
          "value": "ALL"
        },
        {
          "name": "--security-opt",
          "type": "named",
          "value": "no-new-privileges:true"
        },
        {
          "name": "--publish",
          "type": "named",
          "value": "127.0.0.1:8000:8000"
        }
      ],
      "environmentVariables": [
        {
          "name": "MCP_SERVER_RESOURCE_SERVER_URL",
          "isRequired": true,
          "description": "Protected-resource URL advertised by this deployment"
        },
        {
          "name": "MCP_SERVER_AUTH_PROVIDER",
          "choices": [
            "entra",
            "generic"
          ],
          "isRequired": true,
          "description": "Authorization-server adapter to use"
        },
        {
          "name": "MCP_SERVER_REQUIRED_SCOPES",
          "default": "[\"mcp:tools:call\"]",
          "description": "JSON array of baseline delegated OAuth scopes"
        },
        {
          "name": "MCP_SERVER_TRANSPORT_ALLOWED_HOSTS",
          "default": "[\"127.0.0.1:8000\"]",
          "description": "Additional exact Host values accepted by the local container transport"
        },
        {
          "name": "MCP_SERVER_ENTRA_TENANT_ID",
          "description": "Required when MCP_SERVER_AUTH_PROVIDER=entra"
        },
        {
          "name": "MCP_SERVER_ENTRA_AUDIENCE",
          "description": "Required when MCP_SERVER_AUTH_PROVIDER=entra"
        },
        {
          "name": "MCP_SERVER_ENTRA_APPLICATION_ID_URI",
          "description": "Required when MCP_SERVER_AUTH_PROVIDER=entra"
        },
        {
          "name": "MCP_SERVER_GENERIC_ISSUER_URL",
          "description": "Required when MCP_SERVER_AUTH_PROVIDER=generic"
        },
        {
          "name": "MCP_SERVER_GENERIC_AUDIENCE",
          "description": "Required when MCP_SERVER_AUTH_PROVIDER=generic"
        },
        {
          "name": "MCP_SERVER_GENERIC_JWKS_ALLOWED_ORIGINS",
          "default": "[]",
          "description": "Optional JSON array of explicitly trusted cross-origin JWKS origins"
        }
      ]
    }
  ],
  "repository": {
    "id": "1327263126",
    "url": "https://github.com/brunovicco/mcp-server-auth-template",
    "source": "github"
  },
  "websiteUrl": "https://github.com/brunovicco/mcp-server-auth-template",
  "description": "OAuth 2.1/OIDC resource-server reference for secure MCP authorization"
}