A reusable OAuth 2.0 client library for MCP (Model Context Protocol) servers
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"chuk-mcp-client-oauth","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# chuk-mcp-client-oauth A simple, secure OAuth 2.0 client library for connecting to MCP (Model Context Protocol) servers. **Perfect for developers who want to add OAuth authentication to their MCP applications without wrestling with OAuth complexity.** [](https://github.com/chrishayuk/chuk-mcp-client-oauth/actions) [](https://github.com/chrishayuk/chuk-mcp-client-oauth) [](https://www.python.org/downloads/) [](https://github.com/chrishayuk/chuk-mcp-client-oauth) --- ## 🎯 What is This? This library makes it **dead simple** to authenticate with OAuth-enabled MCP servers. Whether you're building a CLI tool, web app, or service that needs to connect to MCP servers, this library handles all the OAuth complexity for you. ### What's MCP OAuth? MCP (Model Context Protocol) servers can use OAuth 2.0 to control who can access them. Think of it like logging into GitHub or Google - but for AI/LLM services. **As a client developer, you need:** 1. 🔐 **Authenticate** - Get permission from the server 2. 💾 **Store tokens** - Keep credentials secure 3. 🔄 **Refresh tokens** - Keep sessions alive 4. 🔧 **Use tokens** - Include them in API requests This library does all of that for you. ### OAuth 2.1 & MCP Compliance This library implements: - ✅ **OAuth 2.1 Best Practices** - Authorization Code + PKCE, no legacy grants - ✅ **MCP Authorization Spec** - Protected Resource Metadata discovery (RFC 9728) - ✅ **Resource Indicators** - Token binding to prevent reuse (RFC 8707) - ✅ **WWW-Authenticate Fallback** - Discovery from 401/403 responses - ✅ **Secure Token Storage** - OS keychain, encrypted files, HashiCorp Vault - ✅ **Automatic Token Refresh** - Handles expiration transparently - 🔄 *…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.