Install
$ agentstack add mcp-scalekit-inc-mcp-auth-demos ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
MCP Auth Demos: Node.js, Python & Ruby Servers
This repository demonstrates secure, production-ready Model Context Protocol (MCP) servers in Node.js, Python, and Ruby on Rails, with full integration to the Scalekit platform for OAuth 2.1 authentication and dynamic client registration.
Repository Structure
greeting-mcp-node/
Node.js (TypeScript) MCP server with Scalekit OAuth 2.1 authentication and permissioned tool access.
byoa-mcp-node/
Node.js (TypeScript) MCP server demonstrating Bring Your Own Auth — Scalekit redirects to your own login page, you authenticate the user with your existing auth system, and Scalekit issues the MCP token. Custom claims (e.g. org_id, org_name) are embedded in the token and available to every tool handler.
greeting-mcp-python/
Python (FastAPI + FastMCP) MCP server with Scalekit authentication and permissioned tool access.
greeting-mcp-ruby/
Ruby on Rails MCP server with Scalekit OAuth 2.1 authentication. Uses the official MCP Ruby SDK with JWKS-based token validation — no client secret required.
Each subdirectory contains its own README with detailed setup and usage instructions.
Features
- Scalekit OAuth 2.1 Authentication: Secure, standards-based authentication and authorization for all MCP requests.
- Bring Your Own Auth (BYOA): Connect your existing login page to Scalekit's OAuth layer — no user migration required.
- Custom Token Claims: Pass any user/org attributes through the token so MCP tools can read them without extra database calls.
- Dynamic Client Registration: Register MCP servers with Scalekit for secure, permissioned access.
- JWKS Token Validation: RS256 signature verification via auto-discovered JWKS — no client secrets stored.
- Tool-Based Architecture: Easily extend with new tools and permissions.
- Production-Ready: Includes logging, CORS, and environment-based configuration.
Quick Start
See the README in each subproject for setup instructions:
- [Node.js MCP Server](./greeting-mcp-node/README.md)
- [Node.js BYOA MCP Server](./byoa-mcp-node/README.md)
- [Python MCP Server](./greeting-mcp-python/README.md)
- [Ruby on Rails MCP Server](./greeting-mcp-ruby/README.md)
License
This repository is licensed under the MIT License. See [LICENSE](./LICENSE) for details.
Learn More
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: scalekit-inc
- Source: scalekit-inc/mcp-auth-demos
- License: MIT
- Homepage: https://docs.scalekit.com/mcp/oauth/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.