I'm setting up my first MCP server, and I'm curious about best practices for setting up authentication.
It appears that only API token auth is available...is that correct?
Is there any way to set up OAuth2.0 for the MCP? According to the spec Authorization - Model Context Protocol MCP servers are always supposed to OAuth...
If not, how should I connect a client that assumes all MCP servers use OAuth?
OAuth support is imminent. For now, some clients let you use a bearer token, like Claude Desktop:
{
"mcpServers": {
"integrator": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.integrator.io/mcp/acctInvestigate",
"--header",
"Authorization:${AUTH_HEADER}",
"--transport",
"http-first"
],
"env": {
"AUTH_HEADER": "Bearer XYZ"
}
}
},
"preferences": {
"sidebarMode": "chat",
"coworkScheduledTasksEnabled": false
}
}