# Mcp Auth Demos

> Model Context Protocol authentication demos - AI assistant integration examples

- **Type:** MCP server
- **Install:** `agentstack add mcp-scalekit-inc-mcp-auth-demos`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [scalekit-inc](https://agentstack.voostack.com/s/scalekit-inc)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [scalekit-inc](https://github.com/scalekit-inc)
- **Source:** https://github.com/scalekit-inc/mcp-auth-demos
- **Website:** https://docs.scalekit.com/mcp/oauth/

## Install

```sh
agentstack add mcp-scalekit-inc-mcp-auth-demos
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# MCP Auth Demos: Node.js, Python & Ruby Servers

This repository demonstrates secure, production-ready Model Context Protocol (MCP) servers in Node.js, Python, and Ruby on Rails, with full integration to the Scalekit platform for OAuth 2.1 authentication and dynamic client registration.

## Repository Structure

- `greeting-mcp-node/`
  Node.js (TypeScript) MCP server with Scalekit OAuth 2.1 authentication and permissioned tool access.

- `byoa-mcp-node/`
  Node.js (TypeScript) MCP server demonstrating **Bring Your Own Auth** — Scalekit redirects to your own login page, you authenticate the user with your existing auth system, and Scalekit issues the MCP token. Custom claims (e.g. `org_id`, `org_name`) are embedded in the token and available to every tool handler.

- `greeting-mcp-python/`
  Python (FastAPI + FastMCP) MCP server with Scalekit authentication and permissioned tool access.

- `greeting-mcp-ruby/`
  Ruby on Rails MCP server with Scalekit OAuth 2.1 authentication. Uses the official MCP Ruby SDK with JWKS-based token validation — no client secret required.

Each subdirectory contains its own README with detailed setup and usage instructions.

## Features

- **Scalekit OAuth 2.1 Authentication**: Secure, standards-based authentication and authorization for all MCP requests.
- **Bring Your Own Auth (BYOA)**: Connect your existing login page to Scalekit's OAuth layer — no user migration required.
- **Custom Token Claims**: Pass any user/org attributes through the token so MCP tools can read them without extra database calls.
- **Dynamic Client Registration**: Register MCP servers with Scalekit for secure, permissioned access.
- **JWKS Token Validation**: RS256 signature verification via auto-discovered JWKS — no client secrets stored.
- **Tool-Based Architecture**: Easily extend with new tools and permissions.
- **Production-Ready**: Includes logging, CORS, and environment-based configuration.

## Quick Start

See the README in each subproject for setup instructions:

- [Node.js MCP Server](./greeting-mcp-node/README.md)
- [Node.js BYOA MCP Server](./byoa-mcp-node/README.md)
- [Python MCP Server](./greeting-mcp-python/README.md)
- [Ruby on Rails MCP Server](./greeting-mcp-ruby/README.md)

## License

This repository is licensed under the MIT License. See [LICENSE](./LICENSE) for details.

## Learn More

- [Scalekit Documentation](https://docs.scalekit.com/guides/mcp/overview/)
- [Scalekit BYOA Docs](https://docs.scalekit.com/mcp/auth-methods/custom-auth/)
- [Model Context Protocol (MCP)](https://modelcontextprotocol.org/)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [scalekit-inc](https://github.com/scalekit-inc)
- **Source:** [scalekit-inc/mcp-auth-demos](https://github.com/scalekit-inc/mcp-auth-demos)
- **License:** MIT
- **Homepage:** https://docs.scalekit.com/mcp/oauth/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-scalekit-inc-mcp-auth-demos
- Seller: https://agentstack.voostack.com/s/scalekit-inc
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.