Bridges the authentication gap for secure Model Context Protocol servers using Microsoft Entra ID with .NET.
This project provides a robust .NET boilerplate for developing secure Model Context Protocol (MCP) servers, seamlessly integrating with Microsoft Entra ID (Azure AD). It functions as an essential OAuth 2.1 proxy, translating between Claude AI's requirement for RFC 7591 Dynamic Client Registration and Entra ID's standard OAuth 2.0 flow, thereby enabling secure authentication for enterprise environments. Fully tested with Claude AI, this project accelerates the setup of Entra-protected MCP servers by including all necessary components for user authentication, identity management, and secure exposure of MCP tools, while also demonstrating how to bridge the authentication gap between different identity systems.
Key Features
01Implements RFC 7591 Dynamic Client Registration for broad client compatibility
02Enables token mapping from Entra ID to internal JWT tokens with user claims
03Custom Login UI with branding options
04Includes production-ready components such as CORS, HTTPS, and structured logging
050 GitHub stars
06Supports Dual PKCE Flows for secure authentication between all components
Use Cases
01Enable Claude AI to securely authenticate with Microsoft Entra ID
02Quickly set up an Entra ID-protected Model Context Protocol server
03Deploy MCP tools in trusted enterprise environments
