MCP Server with Access OAuth

Example Use Cases

• 1

  Connect to a remote MCP server secured by OAuth so tools are only available to authenticated users.

• 2

  Invoke server-side tools (e.g., add, userInfoOctokit, or restricted image generation) over an SSE MCP connection.

• 3

  Integrate MCP tooling with Cloudflare Workers infrastructure, using Durable Objects and KV for persistent auth state.

Description

This repository implements a remote MCP server built on Cloudflare Workers that authenticates clients via OAuth (Cloudflare Access / OIDC) and exposes tools over SSE for MCP clients. It integrates an OAuth Provider, Durable Objects, and KV storage to manage tokens, persistent state, and conditional tool availability. The project includes examples for restricting tool access by GitHub usernames and instructions for deploying locally or to a Workers domain. It is intended as a reference implementation to integrate OAuth providers with MCP servers and to connect clients such as Inspector, Claude Desktop, and Cursor.