cerbos-mcp-authorization-demo
Verified Safeby cerbos
Overview
Implements role-based access control for AI Assistant tools using Model Context Protocol (MCP) and Cerbos policies.
Installation
npm startSecurity Notes
The server includes a simulated user authentication (`req.user = { ... }`) for demonstration purposes, explicitly stating it should be replaced with OAuth in production. This is not a vulnerability in the context of a demo but a critical point for deployment. The Cerbos client connects to `localhost:3593` without TLS, which is acceptable for local development but would be a network risk if the Cerbos PDP were exposed publicly without TLS. No 'eval' or direct malicious patterns are present in the provided source code.
Similar Servers
example-remote-server
A reference server demonstrating all Model Context Protocol (MCP) features and OAuth 2.0 authentication patterns.
mcp-tools
Provides a TypeScript library to simplify building Model Context Protocol (MCP) clients and servers, enabling AI applications to securely access private user data through OAuth-based authentication flows.
mcp-typescript-starter
A feature-complete Model Context Protocol (MCP) server template in TypeScript demonstrating all major MCP features for AI assistant interaction.
mcp-agent-starter-kit
A starter kit for building custom AI agents using the Model Context Protocol (MCP) to connect real-world tools with Large Language Models (LLMs).