Back to Home
Originate-Group icon

common-mcp-submodule

Verified Safe

by Originate-Group

Overview

Provides a production-ready framework for building HTTP Model Context Protocol (MCP) servers with FastAPI, supporting OAuth 2.1 and Personal Access Token authentication.

Installation

Run Command
No command provided

Environment Variables

  • KEYCLOAK_URL
  • KEYCLOAK_REALM
  • KEYCLOAK_CLIENT_ID
  • APP_BASE_URL

Security Notes

The server employs robust authentication mechanisms, including OAuth 2.1 token validation via JWKS and configurable PAT verification using a user-provided asynchronous function, promoting secure handling of credentials. External network requests (e.g., to Keycloak) utilize `httpx` with explicit timeouts. Configuration relies on environment variables, preventing hardcoded secrets. The `Access-Control-Allow-Origin: *` header is used for specific OAuth discovery and proxy endpoints, which is common for public OAuth providers and custom connectors, but could be restricted further if all client origins are known.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassLow
Avg Tokens300
Stars0
Forks0
Last Update2025-12-12

Tags

MCPFastAPIOAuthPATDocker