MCP Server Bearer Auth

🚀 Set Up a Remote MCP Server on Cloudflare

Let's launch a well - functioning remote MCP server on Cloudflare Workers and integrate OAuth login functionality!

🚀 Quick Start

📦 Installation

# Clone the repository
git clone git@github.com:cloudflare/ai.git

# Install dependencies
cd ai
npm install

# Run locally
npx nx dev remote-mcp-server-bearer-auth

You should be able to open http://localhost:8787/ in your browser to view the server.

💻 Usage Examples

Connect the MCP Inspector to Your Server

To explore the new MCP API, you can use the MCP Inspector.

• Start it using npx @modelcontextprotocol/inspector.
• In the inspector (e.g., http://localhost:5173), switch the transport type to SSE, enter http://localhost:8787/sse as the MCP server address in the URL, and then click "Connect".
• Add a bearer token and click "Connect".
• Click "List Tools".
• Run the "getToken" tool, which should return the Authorization header you set in the inspector.

Connect Claude Desktop to Your Local MCP Server

    "remote-example": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "http://localhost:8787/sse",
        "--header",
        "Authorization: Bearer {token}"
      ]
    }

Deploy to Cloudflare

npm run deploy

Call Your New Remote MCP Server from a Remote MCP Client

Just like in "Local Development", run the MCP inspector: npx @modelcontextprotocol/inspector@latest Then, in the inspector, enter the workers.dev URL of your Worker (e.g., worker-name.account-name.workers.dev/sse) as the MCP server address and click "Connect". You have now connected the MCP server to the remote MCP client. You can pass the bearer token as mentioned above.

Connect Claude Desktop to Your Remote MCP Server

TODO: We need to support arbitrary headers in the mcp-remote proxy.

🔧 Debugging

If you encounter any issues, restarting Claude or directly connecting to your MCP server using the following command may help:

npx mcp-remote http://localhost:8787/sse

In rare cases, clearing the files in the ~/.mcp-auth directory may be helpful:

rm -rf ~/.mcp-auth