typescript-sdk/examples/bearer-auth
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Felix Weinberger 1823aae891
Implement MCP 2026-07-28 (#2286)
Co-authored-by: Matt <77928207+mattzcarey@users.noreply.github.com>
Co-authored-by: Konstantin Konstantinov <KKonstantinov@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-26 14:01:10 +01:00
..
client.ts Implement MCP 2026-07-28 (#2286) 2026-06-26 14:01:10 +01:00
package.json Implement MCP 2026-07-28 (#2286) 2026-06-26 14:01:10 +01:00
README.md Implement MCP 2026-07-28 (#2286) 2026-06-26 14:01:10 +01:00
server.ts Implement MCP 2026-07-28 (#2286) 2026-06-26 14:01:10 +01:00

bearer-auth

Resource-server-only auth: requireBearerAuth from @modelcontextprotocol/express in front of createMcpHandler. The client asserts 401 + WWW-Authenticate without a token, and that the verified authInfo reaches the factory (ctx.authInfo) with one.

HTTP-only by definition. The full interactive OAuth set lives under ../oauth/ (run headlessly in CI via the demo AS's auto-consent mode).