Authed MCP Integration

This package provides integration between Authed authentication and the Model Context Protocol (MCP).

Overview

The Authed MCP integration allows you to:

1. Create MCP servers with Authed authentication
2. Create MCP clients that can authenticate with Authed
3. Connect to pure MCP servers without Authed authentication (optional)
4. Accept connections from pure MCP clients without Authed authentication (optional)

Installation

pip install authed-mcp

Quick Start

Server Setup

from authed import Authed
from mcp.server.fastmcp import FastMCP
from authed_mcp import AuthedMiddleware
from starlette.applications import Starlette

# Initialize Authed SDK
authed = Authed.initialize(
    registry_url=os.getenv("AUTHED_REGISTRY_URL"),
    agent_id=os.getenv("AUTHED_AGENT_ID"),
    agent_secret=os.getenv("AUTHED_AGENT_SECRET"),
    private_key=os.getenv("AUTHED_PRIVATE_KEY"),
    public_key=os.getenv("AUTHED_PUBLIC_KEY")
)

# Create MCP server with Authed protection
app = Starlette(
    middleware=[
        Middleware(
            AuthedMiddleware,
            authed=authed,
            # If True, all requests must be authenticated using Authed
            # If False, allows unauthenticated requests
            require_auth=True,
            # Enable debug logging for authentication
            debug=True
        )
    ]
)

Client Setup

from authed import Authed
from mcp import ClientSession
from authed_mcp import get_auth_headers

# Initialize client
authed = Authed.initialize(
    registry_url=os.getenv("AUTHED_REGISTRY_URL"),
    agent_id=os.getenv("AUTHED_AGENT_ID"),
    agent_secret=os.getenv("AUTHED_AGENT_SECRET"),
    private_key=os.getenv("AUTHED_PRIVATE_KEY"),
    public_key=os.getenv("AUTHED_PUBLIC_KEY")
)

# Connect with authentication
headers = await get_auth_headers(
    authed=authed,
    url="http://localhost:8000/sse",
    method="GET",
    
    # The agent ID of the server you're connecting to
    # This must be different from your client's agent_id
    target_agent_id=os.getenv("TARGET_AGENT_ID"),
    
    # If True, allows connection to pure MCP servers without Authed authentication
    # If False, requires the server to support Authed authentication
    fallback=False,
    
    # Enable debug logging for authentication
    debug=True
)

Examples

Check out the examples directory for complete working examples:

• examples/server/ - Example MCP server with Authed authentication
• examples/client/ - Example MCP client that connects to the server

Contributing

Contributions are welcome! Please check out our Contributing Guide.

License

This project is licensed under the MIT License - see the LICENSE file for details.