Auth0 Provider

http://localhost:3000/callback // for testing
https://yourdomain.com/callback

http://localhost:3000 // for testing
https://yourdomain.com

import { MCPServer, oauthAuth0Provider } from 'mcp-use/server'

const server = new MCPServer({
  name: 'my-server',
  version: '1.0.0',
  oauth: oauthAuth0Provider({
    domain: process.env.MCP_USE_OAUTH_AUTH0_DOMAIN!, // 'your-tenant.auth0.com'
    audience: process.env.MCP_USE_OAUTH_AUTH0_AUDIENCE!, // 'https://your-api.example.com'
  })
})

server.listen(3000)

# .env
MCP_USE_OAUTH_AUTH0_DOMAIN=your-tenant.auth0.com
MCP_USE_OAUTH_AUTH0_AUDIENCE=https://your-api.example.com

const server = new MCPServer({
  oauth: oauthAuth0Provider({
    // Required
    domain: 'your-tenant.auth0.com',
    audience: 'https://your-api.example.com',
    
    // Optional
    clientId: process.env.AUTH0_CLIENT_ID,
    clientSecret: process.env.AUTH0_CLIENT_SECRET,
    
    // OAuth mode: 'proxy' (default) or 'direct'
    mode: 'proxy',
    
    // JWT verification (should be true in production)
    verifyJwt: process.env.NODE_ENV === 'production',
    
    // Custom scopes
    scopes: ['openid', 'profile', 'email', 'offline_access'],
    
    // Custom user info extraction
    getUserInfo: (payload) => ({
      userId: payload.sub,
      email: payload.email,
      name: payload.name,
      roles: payload['https://myapp.com/roles'] || [],
      permissions: payload.permissions || [],
    })
  })
})

exports.onExecutePostLogin = async (event, api) => {
  const permissions = event.authorization?.permissions || [];
  api.accessToken.setCustomClaim('permissions', permissions);
};

server.tool({
  name: 'delete-document',
  schema: z.object({ documentId: z.string() }),
}, async ({ documentId }, context) => {
  if (!context.auth.permissions?.includes('delete:documents')) {
    return error('Forbidden: delete:documents permission required')
  }
  
  await db.documents.delete({ id: documentId })
  return text('Document deleted')
})

server.listen(3000)
console.log('🔍 Inspector: http://localhost:3000/inspector')