mirror of
https://github.com/mcp-use/mcp-use.git
synced 2026-09-14 18:06:01 +08:00
Vincenzo Reina
aca5f9c040
* feat: Add PRM in the metadata discovery * fix: fallback anyway to PRM * feat: Implement complete discovery logic * feat: Final implementation of CIMD * feat: Implement PKCE * feat: Add scope from WWW-Authenticate * feat: Add all URLs possible styles * feat: Update tests and example * docs: Update docs * fix: linting * docs: update API documentation * fix: correct typos in OAuth metadata and error messages - Updated the comment in ProtectedResourceMetadata to use the correct abbreviation (PRM). - Fixed a typo in the OAuthAuthenticationError message regarding code challenge support. - Corrected the comment for legacy client paths to use "pre-registered" instead of "pre-reggistered". * feat: restructure authentication documentation and add new methods - Updated the authentication section in to group authentication methods under a new Authentication category with an icon. - Removed the old file and replaced it with new documentation files for Bearer Token, Custom Auth, and OAuth 2.1. - Introduced an overview page for authentication methods, detailing usage and configuration for each method. - Enhanced security best practices and examples for each authentication type to improve clarity and usability. * refactor: improve debug logging for OAuth metadata discovery - Updated debug messages to provide clearer context by specifying the issuer or host being queried during OAuth and OpenID Connect metadata discovery. - Enhanced error logging to remove redundant information, focusing on the failure reason without repeating the URL. * fix: correct abbreviation in ProtectedResourceMetadata documentation - Updated the abbreviation from PRC to PRM in the ProtectedResourceMetadata section to ensure accuracy in the documentation. * fix(oauth): correct RFC 8414 well-known URL construction for path-based issuers The OAuth metadata discovery was incorrectly constructing .well-known URLs by appending to the issuer instead of inserting between host and path. RFC 8414 specifies that for an issuer like https://github.com/login/oauth, the .well-known URL should be: https://github.com/.well-known/oauth-authorization-server/login/oauth We were incorrectly building: https://github.com/login/oauth/.well-known/oauth-authorization-server This fix: - Implements correct RFC 8414 URL construction (insert between host/path) - Supports OpenID Connect style as fallback (append to issuer) - Removes GitHub-specific hardcode since discovery now works correctly - Adds documentation comments explaining the two standards Ref: https://www.rfc-editor.org/rfc/rfc8414.html#section-3 * chore: oauth examples * docs: enhance OAuth endpoint discovery documentation - Updated the OAuth documentation to clarify how `mcp-use` discovers OAuth endpoints using both OAuth 2.0 and OpenID Connect standards. - Added a table detailing the URL construction methods for each standard. - Included examples for better understanding and a note on fallback behavior when the issuer has no path. * response to bs codeql * fix: update API URL Updated the GitHub API URL in the configuration to the correct endpoint for OAuth operations. --------- Co-authored-by: Enrico Toniato <2827496+tonxxd@users.noreply.github.com> Co-authored-by: pietrozullo <pietro.zullo@gmail.com>
47 lines
1.1 KiB
Python
47 lines
1.1 KiB
Python
"""
|
|
Test OAuth with Dynamic Client Registration (DCR) using Linear.
|
|
|
|
Linear supports DCR, so no manual OAuth app setup is required.
|
|
Just run this script and it will:
|
|
1. Discover OAuth metadata from Linear
|
|
2. Dynamically register a client
|
|
3. Open your browser to authorize
|
|
4. Connect to the MCP server
|
|
"""
|
|
|
|
import asyncio
|
|
|
|
from mcp_use import MCPClient
|
|
|
|
config = {
|
|
"mcpServers": {
|
|
"linear": {
|
|
"url": "https://mcp.linear.app/sse"
|
|
# No auth config needed - DCR handles everything
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
async def main():
|
|
client = MCPClient(config=config)
|
|
|
|
try:
|
|
session = await client.create_session("linear")
|
|
print("Connected to Linear MCP server!")
|
|
|
|
# List available tools
|
|
tools = await session.connector.list_tools()
|
|
print(f"\nAvailable tools ({len(tools)}):")
|
|
for tool in tools[:5]: # Show first 5
|
|
print(f" - {tool.name}")
|
|
if len(tools) > 5:
|
|
print(f" ... and {len(tools) - 5} more")
|
|
|
|
finally:
|
|
await client.close_all_sessions()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
asyncio.run(main())
|