Drop-in OAuth 2.1 + Dynamic Client Registration for MCP servers, backed by mcpauth.
Connect Getmcpauth to Claude, Cursor or any other MCP client and it stops being a tab you switch to. Drop-in OAuth 2.1 + Dynamic Client Registration for MCP servers, backed by mcpauth. The getmcpauth mcp server is what makes that connection.
Wraps the official @modelcontextprotocol/sdk's requireBearerAuth middleware so unauthenticated or invalid requests get rejected with a spec-correct 401 before they ever reach your MCP server's handlers.
Installation goes through your MCP client rather than a global install: point it at getmcpauth on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Configuration is passed through the environment: MCPAUTH_SECRET. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
This sits in the developer tooling group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. It is maintained by yilmazali325; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Getmcpauth's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
{
"mcpServers": {
"getmcpauth": {
"command": "npx",
"args": ["-y", "getmcpauth"],
"env": {
"MCPAUTH_SECRET": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| MCPAUTH_SECRET | Credential the server authenticates with. | Yes |
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.