AuthPlane/authserver

View on GitHub ↗

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

50 ★1 forksGoUpdated 24d ago

What you need to know

Self-hosted authorization server for MCP implementing the 2025-11-25 MCP authorization spec end-to-end, with OAuth 2.1 support.

Install

docker run authplane/authserver:latest serve

Key features

  • OAuth 2.1 + MCP authorization server (single Go binary)
  • Federation with existing IdPs (Google, Okta, Azure AD, Auth0)
  • Agent-to-agent delegation with act-claim chains
  • DPoP proof-of-possession
  • Upstream provider token vaulting (RFC 8693)
  • Built-in Admin UI and REST API
  • PostgreSQL, OpenTelemetry, Prometheus, Helm chart
  • SDKs for Python, TypeScript, and Go

Best for

Teams securing MCP servers with spec-compliant authorization and token issuance.

Platforms: Docker · Go · PostgreSQL

Reviewed 2026-08-11

Topics

apps-sdkauthorizationauthorization-servercibaclaudedpopjwtmcpmcp-authmcp-authorizationmcp-securitymcp-servermodel-context-protocoloauth2oauth21securityxaa
Stars
50★
Forks
1
Language
Go
License
AGPL-3.0
Created
2026-06-11
Last push
2026-08-12