Files
wehub-resource-sync 60e0ffc959
Upgrade checks / Notify on failure (push) Has been cancelled
Upgrade checks / Close issue on success (push) Has been cancelled
Schema Crash Test / Real-world schema crash test (232K schemas) (push) Has been cancelled
Run static analysis / static_analysis (push) Has been cancelled
Tests / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Tests / Tests with lowest-direct dependencies (push) Has been cancelled
Tests / MCP conformance tests (push) Has been cancelled
Tests / Integration tests (push) Has been cancelled
Tests / Package install smoke (push) Has been cancelled
Upgrade checks / Static analysis (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Upgrade checks / Integration tests (push) Has been cancelled
Update MCPServerConfig Schema / update-config-schema (push) Has been cancelled
Update SDK Documentation / update-sdk-docs (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:39:59 +08:00
..

AuthKit Example

Protects a FastMCP server with WorkOS AuthKit. The server binds the JWT aud claim to its own resource URL automatically — you just paste that same URL into the WorkOS Dashboard as a resource indicator.

WorkOS Dashboard setup

In the WorkOS Dashboard for your project, go to Connect → Configuration and:

  1. Under MCP Auth, enable Dynamic Client Registration (or Client ID Metadata Document if your MCP client supports it).
  2. Under MCP resource indicators, add http://127.0.0.1:8000/mcp as a valid resource indicator.

Running

  1. Set your AuthKit domain:

    export AUTHKIT_DOMAIN="https://your-app.authkit.app"
    
  2. Start the server. It logs the resource URL it's validating against — that's the URL that must match your dashboard resource indicator:

    python server.py
    
  3. In another terminal, run the client. Your browser will open for AuthKit authentication:

    python client.py