OAuth2 implementation for Model Context Protocol (MCP) servers using Ory Hydra and Kratos. Covers Dynamic Client Registration, token introspection, social login via GitHub, and compatibility testing across Claude (Desktop, CLI, Web) and ChatGPT clients. Documents five critical bugs encountered during implementation, including Claude's DCR validation failures and missing scope parameters, with working solutions including a DCR proxy pattern. Includes production security checklist and comparison of OAuth2 support across AI assistant platforms.
Table of contents
Why Not Just Use API Keys?Learning by DoingPart 1: Setting Up Ory NetworkPart 2: GitHub Social Login (Optional but Recommended)Part 3: Your MCP Server with OAuth2The Five Bugs I Hit (And Their Fixes)Part 4: Testing the Full OAuth2 FlowWhat About ChatGPT?ResourcesAcknowledgmentsEdouard Maleix Follow561 Impressions