Ozzynet MCP Server

🚀 Simple MCP Server with Upstream Authentication via Local REST Endpoint

This is a prototype where the MCP server provides tools but restricts access based on its internal state and requires users to authenticate via an external URL.

In this case, the external URL is wrapped with Quarkus OIDC and requires authentication through GitHub. The resulting access token from GitHub is then stored in the MCP for the session ID used by the user.

Note: You must edit application.properties to add your client ID and secret for the GitHub OAuth app.

📋 Requirements

• JBang
• An OAuth2 app with GitHub
• An MCP client, such as Claude

🛠️ Creating an OAuth2 App with GitHub

1. Navigate to https://github.com/settings/developers.
2. Select "OAuth Apps" from the left - hand menu.
3. Click "New OAuth App".
4. Name it and set the callback URL to http://127.0.0.1:8080/auth.
5. Copy the client ID to application.properties.
6. Click "Generate a new client secret" and copy the secret to application.properties.
7. Update the Claude desktop configuration JSON...

For Windows

{
    "mcpServers": {
        "ozzynet": {
            "command": "cmd",
            "args": [
                "/c",
                "C:\\Users\\YOURUSERNAME\\.jbang\\bin\\jbang.cmd",
                "--quiet",
                "org.ozzy:stiletto:1.0.0 - SNAPSHOT:runner"
            ]
        }
    }
}

For Mac

{
    "mcpServers": {
        "ozzynet": {
            "command": "jbang",
            "args": [
                "--quiet",
                "org.ozzy:stiletto:1.0.0 - SNAPSHOT:runner"
            ]
        }
    }
}

🧪 Testing...

Let Claude list the issues of a repository. For example, list the issues of the quarkus repository in quarkusio.

Claude will request permission to call the getSessionId tool. Then, Claude will call the listIssues tool and report that it cannot be used because you need authentication. It will provide you with a link in the form of http://127.0.0.1/auth?sessionId=<UUID>. When you click the link, you will be redirected to GitHub to authorize via the previously created OAuth app. After authorization is complete, you can return to Claude and retry the listing operation.