AuthSAFE
🔐 Plug-and-play auth for Node.js MCP servers.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/mcp-auth/js/actions?query=branch%3Amaster) [](https://codecov.io/gh/mcp-auth/js) [](https://www.npmjs.com/package/mcp-auth) [](https://bundlephobia.com/package/mcp-auth) [](https://github.com/mcp-auth/js/blob/master/LICENSE)
The MCP spec requires OAuth 2.1 and other RFCs for auth. Instead of spending weeks on them, use MCP Auth to connect to a trusted provider with a few lines of code.
mcp-auth targets the latest MCP specification and the MCP TypeScript SDK v2, implementing the spec's authorization requirements — RFC 9728 Protected Resource Metadata and RFC 8707 audience-bound token validation — for any OAuth 2.0 / OpenID Connect provider.
Get started
Is my provider supported?
Check out the MCP-compatible providers to see which providers are supported. It also includes a tool for real-time checking of provider compatibility.
Installation
npm install mcp-auth
Or use your package manager of choice, such as pnpm or yarn.
Still on MCP SDK v1 (@modelcontextprotocol/sdk)? Stay on the 0.2 line — npm install [email protected] — and see the v0.2.0 code and samples.
See the documentation for the full guide.
Join the discussion
Join the MCP Auth org discussion to ask questions or share your feedback.
e714e6cc15a3OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add sample-servers -- npx -y @mcp-auth/[email protected]
{
"mcpServers": {
"sample-servers": {
"command": "npx",
"args": [
"-y",
"@mcp-auth/[email protected]"
]
}
}
}Exposed tools (2)
1 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
purge-notes | destructive | |
whoami | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (5)
purge-notes
.dev.vars.example
@changesets/cli, typescript
jose, @modelcontextprotocol/server, @silverhand/eslint-config, @silverhand/ts-config, @types/node, eslint, nock, prettier
@modelcontextprotocol/express, @modelcontextprotocol/node, @modelcontextprotocol/server, hono, zod, @silverhand/eslint-config, @silverhand/ts-config, @types/express
Gates applied: no_behavioural_pass.
e714e6cc15a3full audit observations/trust-audit/mcp-server/mcp-auth__auth.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | e714e6cc15a3 | SAFE | B | 89 | first audit |
Questions
What is the Auth MCP server?
🔐 Plug-and-play auth for Node.js MCP servers.
What tools does Auth expose?
2 in total: 1 read-only, 0 that write, and 1 that can delete or overwrite (purge-notes). Every one is listed on this page with its risk.
Is Auth safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Auth need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (e714e6cc15a3), read on 2026-10-08. The repository is watched and re-audited when it changes.