authplane-mcp 0.1.0

Authplane JWT validation adapter for the official MCP Python SDK

authplane-mcp

Authplane JWT validation for servers built on the official MCP Python SDK.

Install

pip install authplane-mcp

Compatibility

Supported mcp range: >=1.23.0, <1.28.0. MCP 1.28 renamed the elicitation field from elicitationId (camelCase) to elicitation_id (snake_case), which breaks this adapter's current wire handling. If your project needs MCP 1.28+, please open an issue — the adapter update is straightforward, we just haven't cut it yet.

Quickstart

import asyncio
from authplane_mcp import authplane_mcp_auth
from mcp.server.fastmcp import FastMCP

auth_result = asyncio.run(
    authplane_mcp_auth(
        issuer="https://auth.company.com",
        resource="https://mcp.company.com",
        scopes=["tools/query", "tools/write"],
    )
)

mcp = FastMCP("My MCP Server", json_response=True, **auth_result)

@mcp.tool()
async def query_database(query: str) -> str:
    return f"Result for: {query}"

mcp.run(transport="streamable-http")

mcp.run() starts its own event loop, so the auth setup runs synchronously via asyncio.run(...) first. auth_result holds background JWKS and metadata refresh tasks — call await auth_result.aclose() during server shutdown.

Documentation

PRM behavior, dev mode, revocation checking, manual setup, the full authplane_mcp_auth / AuthplaneTokenVerifier API, and error handling: User Guide.