mcp-oauth
Installation
SKILL.md
MCP OAuth Authentication Flow
Connect to any OAuth-protected MCP server using curl and bundled Node.js scripts. Execute steps in order. Stop and report on failure.
Store the user-provided MCP server URL as MCP_SERVER_URL.
1. Discover Protected Resource Metadata
curl -s "${MCP_SERVER_URL}/.well-known/oauth-protected-resource"
Extract resource and first authorization_servers entry as AUTH_SERVER.
Fallback: If 404, POST to ${MCP_SERVER_URL}/ unauthenticated and extract resource_metadata URL from the WWW-Authenticate header. Fetch that URL instead.