Why does my MCP server need Dynamic Client Registration (DCR)?

Claude.ai uses DCR to automatically register as a client with your MCP server, which is a requirement for the standard OAuth handshake between the Claude interface and your backend.

Does this skill handle CSRF protection?

Yes, it includes a robust CSRF protection layer using HttpOnly cookies and state validation to prevent cross-site request forgery during the OAuth handshake.

What Cloudflare resources are required?

You will need a Cloudflare Workers account with a KV Namespace for state storage and Durable Objects enabled for session management.

Can I use this for local MCP development?

While possible, it is recommended to use simple tokens for local development. This skill is optimized for production environments where user-specific data and public access are required.

MCP OAuth Cloudflare

Name: MCP OAuth Cloudflare
Author: jezweb

byjezweb

•

Security & Testing

Implements secure Google OAuth authentication and Dynamic Client Registration for MCP servers hosted on Cloudflare Workers.

About

This skill provides a production-ready framework for adding robust authentication to Model Context Protocol (MCP) servers. It specifically addresses the requirements for deploying MCP servers to Claude.ai by implementing Dynamic Client Registration (DCR) alongside standard OAuth flows. By utilizing Cloudflare Workers, KV namespaces, and Durable Objects, it ensures secure session management, CSRF protection, and easy access to authenticated user metadata (like email and names) directly within your MCP tool handlers, moving beyond insecure static tokens.

Key Features

Dynamic Client Registration (DCR) for Claude.ai compatibility
Pre-configured approval UI for user consent flows
91 GitHub stars
Durable Object-backed session management for MCP agents
Google OAuth 2.0 integration with user profile propagation
Built-in CSRF protection and state validation using KV storage

Use Cases

Replacing static authentication tokens with modern OAuth identity providers
Deploying secure, multi-user MCP servers to the Claude.ai platform
Building MCP tools that require specific user identity or email context

About

Key Features

Dynamic Client Registration (DCR) for Claude.ai compatibility
Pre-configured approval UI for user consent flows
91 GitHub stars
Durable Object-backed session management for MCP agents
Google OAuth 2.0 integration with user profile propagation
Built-in CSRF protection and state validation using KV storage

Use Cases

Replacing static authentication tokens with modern OAuth identity providers
Deploying secure, multi-user MCP servers to the Claude.ai platform
Building MCP tools that require specific user identity or email context