FilesExpand file tree

main

/

tutorial002.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

38 lines (29 loc) · 1.07 KB

main

/

tutorial002.py

Copy path

Top

File metadata and controls

• Code
• Blame

38 lines (29 loc) · 1.07 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

from pydantic import AnyHttpUrl

from mcp.server import MCPServer

from mcp.server.auth.middleware.auth_context import get_access_token

from mcp.server.auth.provider import AccessToken, TokenVerifier

from mcp.server.auth.settings import AuthSettings

RESOURCE = "http://127.0.0.1:8000/mcp"

KNOWN_TOKENS = {

"alice-token": AccessToken(token="alice-token", client_id="alice", scopes=["notes:read"], resource=RESOURCE),

}

class StaticTokenVerifier(TokenVerifier):

async def verify_token(self, token: str) -> AccessToken | None:

return KNOWN_TOKENS.get(token)

mcp = MCPServer(

"Notes",

token_verifier=StaticTokenVerifier(),

auth=AuthSettings(

issuer_url=AnyHttpUrl("https://auth.example.com"),

resource_server_url=AnyHttpUrl(RESOURCE),

required_scopes=["notes:read"],

validate_token_resource=True,

),

)

@mcp.tool()

def whoami() -> str:

"""Report which OAuth client is calling."""

token = get_access_token()

if token is None:

return "anonymous"

return f"{token.client_id} (scopes: {', '.join(token.scopes)})"