http4k-ai-mcp-sdk/org.http4k.ai.mcp.server.security/OAuthMcpSecurity

OAuthMcpSecurity

class OAuthMcpSecurity(resourceMetadata: ResourceMetadata, extraWwwAuthenticateFields: Pair<String, String>, checkToken: (String) -> Boolean) : McpSecurity(source)

Standard OAuthSecurity implementation for MCP. Based around the OAuth protected resource metadata endpoint. You can pass in specific contents of the ResourceMetadata, or extra fields to be added to the WWW-Authenticate header.

Constructors

OAuthMcpSecurity

constructor(resourceMetadata: ResourceMetadata, vararg extraWwwAuthenticateFields: Pair<String, String>, checkToken: (String) -> Boolean)

constructor(authorizationServerUri: Uri, mcpUri: Uri, checkToken: (String) -> Boolean)

Bare bones MCP Security implementation that uses the OAuth protected resource metadata endpoint

Properties

filter

open override val filter: Filter

name

open override val name: String

routes

open override val routes: List<RoutingHttpHandler>