para

#!/usr/bin/env raku
use v6.d;

use MCP;
use MCP::Transport::StreamableHTTP;
use MCP::OAuth::Server;



head

oauth-server - Example MCP server with OAuth 2.1 token validation


Starts an HTTP server that requires Bearer token authentication.
The token validator is a simple callback; in production, this would
verify JWTs or introspect tokens against an authorization server.


Demonstrates:
  - OAuthServerHandler setup with token validation
  - Protected resource metadata endpoint
  - WWW-Authenticate headers on 401/403



# Simple in-memory token validator for demonstration
my %valid-tokens = (
    'demo-token-abc' => { sub => 'user1', scopes => ['read', 'write'] },
    'read-only-token' => { sub => 'user2', scopes => ['read'] },
);

my $oauth = OAuthServerHandler.new(
    resource-identifier => 'http://127.0.0.1:8080',
    authorization-servers => ['https://auth.example.com'],
    scopes-supported => ['read', 'write'],
    token-validator => -> Str $token {
        if %valid-tokens{$token}:exists {
            my %info = %valid-tokens{$token};
            { valid => True, sub => %info<sub>, scopes => %info<scopes> }
        } else {
            { valid => False, message => 'Unknown token' }
        }
    },
);

my $transport = StreamableHTTPServerTransport.new(
    host => '127.0.0.1',
    port => 8080,
    path => '/mcp',
    oauth-handler => $oauth,
);

my $server = Server.new(
    info => Implementation.new(name => 'oauth-server', version => '0.1'),
    transport => $transport,
);

$server.add-tool(
    name => 'secret-data',
    description => 'Return protected data (requires valid token)',
    schema => { type => 'object', properties => {} },
    handler => -> %args {
        'This is protected data accessible only with a valid Bearer token.'
    }
);

await $server.serve;
say "OAuth-protected MCP server listening on http://127.0.0.1:8080/mcp";
say "Protected resource metadata: http://127.0.0.1:8080/.well-known/oauth-protected-resource";
say "";
say "Test with valid token:";
say "  curl -H 'Authorization: Bearer demo-token-abc' ...";
say "Test without token (expect 401):";
say "  curl http://127.0.0.1:8080/mcp ...";
react { whenever Supply.interval(3600) { } }


root

sampling-client

http-server

React

=begin React :component<HeaderCol> :id<menu> 
=para L<Documentation|/doc/introduction>
=para L<Modules| /mods>
=para L<Examples| file:../examples/index.podlite>
=para L<AI|file:../mcp/index.podlite>
=para L<Download |file:../download/index.podlite>
=para L<About|file:../about/index.podlite>
=para 🔍 K<⌘K>/K<ctrl-K>
=end React


=begin React :component<HeaderCol> :id<footer>  
=begin nested :!nested
=item1 B<Language>
    =item2 L<Get started|file:../getting-started/getting-started.podlite>
    =item2 L<Why Raku?|/doc/language/faq#Why-should-I-learn-Raku-What's-so-great-about-it>
    =item2 L<Try Raku|https://glot.io/new/raku>
    =item2 L<Download | file:../download/index.podlite>
    =item2 L<Raku cheat sheet|https://github.com/Raku/mu/blob/master/docs/Perl6/Cheatsheet/cheatsheet.txt>
    =item2 L<Raku on Exercism|https://exercism.org/tracks/raku>
    =item2 L<Wikipedia|https://en.wikipedia.org/wiki/Raku_(programming_language)>

=end nested
=begin nested :!nested

=item1 B<L<Documentation|/doc>>
    =item2 L<Getting started, Migration guides from other languages, & Tutorials | file:../doc/introduction.podlite>
    =item2 L<Language References|file:../doc/reference.podlite>
    =item2 L<Type Reference| file:../doc/types.podlite>
    =item2 L<Miscellaneous| file:../doc/miscellaneous.podlite>
    =item2 L<FAQs (Frequently Asked Questions)|/doc/language/faq>
    =item2 L<Community|/doc/language/community>
    =item2 L<The list of all documents|file:../doc/index.podlite>
    =item2 L<Hand these documents to an AI assistant|file:../mcp/index.podlite>

=end nested
=begin nested :!nested
=item1 B<Learning>
    =item2 L<The Raku Guide|https://raku.guide/>
    =item2 L<Wikibook |https://en.wikibooks.org/wiki/Raku_Programming>
    =item2 L<Books |https://perl6book.com/>
    =item2 L<Rosetta Code | https://www.raku.org/community/rosettacode>
    =item2 L<Learn Raku in Y minutes|https://learnxinyminutes.com/docs/raku/>
    =item2 L<Golfing |https://github.com/AlexDaniel/raku-golf-cheatsheet>
=end nested
=begin nested :!nested

=item1 B<Explore>
    =item2 L<Raku Blog Aggregator|https://planet.raku.org/>
    =item2 L<Rakudo Weekly|https://rakudoweekly.blog/>
    =item2 L<The Weekly Challenge |https://perlweeklychallenge.org/>
    =item2 L<Raku Advent Calendar|https://raku-advent.blog/>

=end nested
=end React


Built with L<Podlite|https://podlite.org> — the markup and publishing tools behind this site.


=begin React :component<CookieConsent> :id<CookieConsent> :buttonCaption("Got it!")
=para
This website uses cookies for analytics.
=end React


oauth-server

NAME

DESCRIPTION

MCP v0.33.6

Authors

License

Dependencies

Test Dependencies

Provides

Documentation