mcp-sso

OAuth 2.1 for remote MCP servers: spec-correct resource-server verification + a small AS bridge that gives MCP clients DCR/PKCE while your IdP (Entra, Cloudflare Access, any OIDC) stays the identity source

{
  "mcpServers": {
    "mcp-sso": {
      "command": "npx",
      "args": [
        "-y",
        "acartag7/mcp-sso"
      ]
    }
  }
}

claude mcp add mcp-sso npx -y acartag7/mcp-sso

{
  "mcpServers": {
    "mcp-sso": {
      "command": "npx",
      "args": [
        "-y",
        "acartag7/mcp-sso"
      ]
    }
  }
}