--- title: How to Secure your MCP Servers with Spring Security 🔐 &... description: A walkthrough of two approaches to securing MCP (Model Context Protocol) servers using Spring Security and Spring AI: OAuth2 with a Spring Authorization Server... canonical: https://daily.dev/posts/how-to-secure-your-mcp-servers-with-spring-security-spring-ai--kmmxkhlvx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖 | daily.dev og:description: A walkthrough of two approaches to securing MCP (Model Context Protocol) servers using Spring Security and Spring AI: OAuth2 with a Spring Authorization Server... og:url: https://daily.dev/posts/how-to-secure-your-mcp-servers-with-spring-security-spring-ai--kmmxkhlvx og:image: https://api.daily.dev/og/posts/KMMxKhlVX.png og:image:alt: How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖 og:image:width: 1200 og:image:height: 630 og:locale: en --- [Dan Vega](https://daily.dev/sources/dan-vega) [Watch video](https://api.daily.dev/r/KMMxKhlVX) # [How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖](https://api.daily.dev/r/KMMxKhlVX "Go to post") A walkthrough of two approaches to securing MCP (Model Context Protocol) servers using Spring Security and Spring AI: OAuth2 with a Spring Authorization Server (federating authentication to GitHub) and API key-based authentication. The tutorial covers dependencies, security filter chain configuration, the MCP inspector tool for testing OAuth flows, and BCrypt-hashed API key storage. Code samples demonstrate both methods, with practical notes on when to use each approach as MCP servers move from local to public deployments. [#security](/tags/security "Check all #security posts")[#mcp](/tags/mcp "Check all #mcp posts")[#spring-security](/tags/spring-security "Check all #spring-security posts")[#spring-ai](/tags/spring-ai "Check all #spring-ai posts") Mar 16 • 23m watch time Comment Bookmark Copy Share your thoughts Post Share this post [](https://daily.dev/sources/dan-vega) [Dan Vega](https://daily.dev/sources/dan-vega "https://daily.dev/sources/dan-vega") 30 Followers • 124 Upvotes #### Would you recommend this post? Copy link Slack WhatsApp Facebook X New Squad Copy linkShare with your friends ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖","url":"https://daily.dev/posts/how-to-secure-your-mcp-servers-with-spring-security-spring-ai--kmmxkhlvx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-secure-your-mcp-servers-with-spring-security-spring-ai--kmmxkhlvx"},"datePublished":"2026-03-16T08:13:18.905Z","dateModified":"2026-03-16T08:17:27.495Z","description":"A walkthrough of two approaches to securing MCP (Model Context Protocol) servers using Spring Security and Spring AI: OAuth2 with a Spring Authorization Server...","image":"https://i.ytimg.com/vi/Xiw4bMD3SOg/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/Xiw4bMD3SOg/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Dan Vega","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dan Vega","logo":"https://media.daily.dev/image/upload/s--qCQZxa91--/f_auto,q_auto/v1773648785/logos/dan-vega?_a=BAMAMiiu0","url":"https://daily.dev/sources/dan-vega"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-secure-your-mcp-servers-with-spring-security-spring-ai--kmmxkhlvx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,mcp,spring-security,spring-ai","timeRequired":"PT23M","video":{"@type":"VideoObject","name":"How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖","description":"A walkthrough of two approaches to securing MCP (Model Context Protocol) servers using Spring Security and Spring AI: OAuth2 with a Spring Authorization Server...","thumbnailUrl":"https://i.ytimg.com/vi/Xiw4bMD3SOg/sddefault.jpg","uploadDate":"2026-03-16T08:13:18.905Z","duration":"PT23M","url":"https://api.daily.dev/r/KMMxKhlVX","embedUrl":"https://www.youtube.com/embed/Xiw4bMD3SOg"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dan Vega","item":"https://daily.dev/sources/dan-vega"},{"@type":"ListItem","position":3,"name":"How to Secure your MCP Servers with Spring Security 🔐 & Spring AI 🤖"}]} ```