Why does my MCP server need Dynamic Client Registration (DCR)?

Claude.ai uses DCR to automatically register as a client with your MCP server, which is a requirement for the standard OAuth handshake between the Claude interface and your backend.

Does this skill handle CSRF protection?

Yes, it includes a robust CSRF protection layer using HttpOnly cookies and state validation to prevent cross-site request forgery during the OAuth handshake.

What Cloudflare resources are required?

You will need a Cloudflare Workers account with a KV Namespace for state storage and Durable Objects enabled for session management.

Can I use this for local MCP development?

While possible, it is recommended to use simple tokens for local development. This skill is optimized for production environments where user-specific data and public access are required.

MCP OAuth Cloudflare

Name: MCP OAuth Cloudflare
Author: jezweb

byjezweb

•

보안 및 테스팅

Implements secure Google OAuth authentication and Dynamic Client Registration for MCP servers hosted on Cloudflare Workers.

This skill provides a production-ready framework for adding robust authentication to Model Context Protocol (MCP) servers. It specifically addresses the requirements for deploying MCP servers to Claude.ai by implementing Dynamic Client Registration (DCR) alongside standard OAuth flows. By utilizing Cloudflare Workers, KV namespaces, and Durable Objects, it ensures secure session management, CSRF protection, and easy access to authenticated user metadata (like email and names) directly within your MCP tool handlers, moving beyond insecure static tokens.

주요 기능

01Dynamic Client Registration (DCR) for Claude.ai compatibility

02Pre-configured approval UI for user consent flows

0391 GitHub stars

04Durable Object-backed session management for MCP agents

05Google OAuth 2.0 integration with user profile propagation

06Built-in CSRF protection and state validation using KV storage

사용 사례

01Replacing static authentication tokens with modern OAuth identity providers

02Deploying secure, multi-user MCP servers to the Claude.ai platform

03Building MCP tools that require specific user identity or email context

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jezweb/claude-skills mcp-oauth-cloudflare

For use in Claude.ai and ChatGPT

Download Skill