wehub-resource-sync
60e0ffc959
Upgrade checks / Notify on failure (push) Has been cancelled
Upgrade checks / Close issue on success (push) Has been cancelled
Schema Crash Test / Real-world schema crash test (232K schemas) (push) Has been cancelled
Run static analysis / static_analysis (push) Has been cancelled
Tests / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Tests / Tests with lowest-direct dependencies (push) Has been cancelled
Tests / MCP conformance tests (push) Has been cancelled
Tests / Integration tests (push) Has been cancelled
Tests / Package install smoke (push) Has been cancelled
Upgrade checks / Static analysis (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Upgrade checks / Integration tests (push) Has been cancelled
Update MCPServerConfig Schema / update-config-schema (push) Has been cancelled
Update SDK Documentation / update-sdk-docs (push) Has been cancelled
37 lines
1008 B
Markdown
37 lines
1008 B
Markdown
# AuthKit Example
|
|
|
|
Protects a FastMCP server with WorkOS AuthKit. The server binds the JWT
|
|
`aud` claim to its own resource URL automatically — you just paste that same
|
|
URL into the WorkOS Dashboard as a resource indicator.
|
|
|
|
## WorkOS Dashboard setup
|
|
|
|
In the WorkOS Dashboard for your project, go to **Connect → Configuration** and:
|
|
|
|
1. Under **MCP Auth**, enable **Dynamic Client Registration** (or **Client ID
|
|
Metadata Document** if your MCP client supports it).
|
|
2. Under **MCP resource indicators**, add `http://127.0.0.1:8000/mcp` as a
|
|
valid resource indicator.
|
|
|
|
## Running
|
|
|
|
1. Set your AuthKit domain:
|
|
|
|
```bash
|
|
export AUTHKIT_DOMAIN="https://your-app.authkit.app"
|
|
```
|
|
|
|
2. Start the server. It logs the resource URL it's validating against —
|
|
that's the URL that must match your dashboard resource indicator:
|
|
|
|
```bash
|
|
python server.py
|
|
```
|
|
|
|
3. In another terminal, run the client. Your browser will open for AuthKit
|
|
authentication:
|
|
|
|
```bash
|
|
python client.py
|
|
```
|