wehub-resource-sync
60e0ffc959
Upgrade checks / Notify on failure (push) Has been cancelled
Upgrade checks / Close issue on success (push) Has been cancelled
Schema Crash Test / Real-world schema crash test (232K schemas) (push) Has been cancelled
Run static analysis / static_analysis (push) Has been cancelled
Tests / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Tests / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Tests / Tests with lowest-direct dependencies (push) Has been cancelled
Tests / MCP conformance tests (push) Has been cancelled
Tests / Integration tests (push) Has been cancelled
Tests / Package install smoke (push) Has been cancelled
Upgrade checks / Static analysis (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.13 on ubuntu-latest (push) Has been cancelled
Upgrade checks / Tests: Python 3.10 on windows-latest (push) Has been cancelled
Upgrade checks / Integration tests (push) Has been cancelled
Update MCPServerConfig Schema / update-config-schema (push) Has been cancelled
Update SDK Documentation / update-sdk-docs (push) Has been cancelled
45 lines
1.6 KiB
Python
45 lines
1.6 KiB
Python
"""Azure (Microsoft Entra) OAuth server example for FastMCP.
|
|
|
|
This example demonstrates how to protect a FastMCP server with Azure/Microsoft OAuth.
|
|
|
|
Required environment variables:
|
|
- AZURE_CLIENT_ID: Your Azure application (client) ID
|
|
- AZURE_CLIENT_SECRET: Your Azure client secret
|
|
- AZURE_TENANT_ID: Tenant ID
|
|
Options: "organizations" (work/school), "consumers" (personal), or specific tenant ID
|
|
- AZURE_REQUIRED_SCOPES: At least one scope required (e.g., "read" or "read,write")
|
|
These must match scope names created under "Expose an API" in your Azure App registration
|
|
|
|
To run:
|
|
python server.py
|
|
"""
|
|
|
|
import os
|
|
|
|
from fastmcp import FastMCP
|
|
from fastmcp.server.auth.providers.azure import AzureProvider
|
|
|
|
auth = AzureProvider(
|
|
client_id=os.getenv("FASTMCP_SERVER_AUTH_AZURE_CLIENT_ID") or "",
|
|
client_secret=os.getenv("FASTMCP_SERVER_AUTH_AZURE_CLIENT_SECRET") or "",
|
|
tenant_id=os.getenv("FASTMCP_SERVER_AUTH_AZURE_TENANT_ID")
|
|
or "", # Required for single-tenant apps - get from Azure Portal
|
|
base_url="http://127.0.0.1:8000",
|
|
required_scopes=["read"],
|
|
# required_scopes is automatically loaded from FASTMCP_SERVER_AUTH_AZURE_REQUIRED_SCOPES
|
|
# At least one scope is required - use unprefixed scope names from your Azure App (e.g., ["read", "write"])
|
|
# redirect_path="/auth/callback", # Default path - change if using a different callback URL
|
|
)
|
|
|
|
mcp = FastMCP("Azure OAuth Example Server", auth=auth)
|
|
|
|
|
|
@mcp.tool
|
|
def echo(message: str) -> str:
|
|
"""Echo the provided message."""
|
|
return message
|
|
|
|
|
|
if __name__ == "__main__":
|
|
mcp.run(transport="http", port=8000)
|