Remote Authenticated Notes MCP Server

Example Use Cases

• 1

  Secure OAuth 2.0 PKCE authentication with tenant isolation.

• 2

  Dynamic client registration compliant with RFC 7591.

• 3

  A stateless MCP server with JWT validation and trusted TLS.

Description

This MCP server demonstrates secure remote access using OAuth 2.0 PKCE authentication integrated with Keycloak, featuring dynamic client registration and JWT token validation. It ensures per-user tenant isolation by leveraging JWT claims and validates token audience to restrict access. The server is stateless, supports trusted TLS certificates via mkcert, and is deployable with Docker Compose including Keycloak and Caddy proxy for HTTPS.