Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

mcpauth

package

Go to main page

Versions in this module

v0

v0.641.3

Jul 30, 2026

v0.641.2

Jul 29, 2026

v0.641.1

Jul 29, 2026

v0.640.1

Jul 29, 2026

v0.631.1

Jul 27, 2026

Changes in this version

+ const DefaultCallbackPath

+ const DefaultCallbackPort

+ const DefaultCallbackTimeout

+ var ErrAuthorizationRequired = errors.New("mcp: oauth authorization required")

+ func BuildTLSConfig(srv config.MCPServer) (*tls.Config, error)

+ func CanonicalResourceURI(raw string) (string, error)

+ func HTTPClientForTLS(tlsCfg *tls.Config, timeout time.Duration) *http.Client

+ func IsAuthorizationRequired(err error) bool

+ func IsInteractive() bool

+ func NonInteractiveLoginError(serverName string) error

+ func TransportForTLS(tlsCfg *tls.Config) http.RoundTripper

+ type CallbackServer struct

+ func StartCallbackServer(redirectURI string) (*CallbackServer, error)

+ func (cs *CallbackServer) Close() error

+ func (cs *CallbackServer) RedirectURI() string

+ func (cs *CallbackServer) Wait(ctx context.Context, state string, timeout time.Duration) (code string, iss string, err error)

+ type Challenge struct

+ Error string

+ ErrorDescription string

+ ResourceMetadata string

+ Scheme string

+ Scope []string

+ func ParseChallenge(header string) Challenge

+ func ParseChallenges(headers []string) Challenge

+ type ClientCredentialsParams struct

+ ClientID string

+ ClientSecret string

+ HTTPClient *http.Client

+ Resource string

+ Scopes []string

+ TokenEndpoint string

+ type ClientInfo struct

+ ClientID string

+ ClientSecret string

+ IssuedAt int64

+ SecretExpiresAt int64

+ type Entry struct

+ ClientInfo *ClientInfo

+ Metadata *Metadata

+ RequestedScopes []string

+ ServerURL string

+ Tokens *Tokens

+ UpdatedAt time.Time

+ type ErrInsufficientScope struct

+ Scopes []string

+ ServerName string

+ func IsInsufficientScope(err error) (*ErrInsufficientScope, bool)

+ func (e *ErrInsufficientScope) Error() string

+ type LoginPrompt struct

+ ManualCode func(ctx context.Context) (code string, state string, iss string, err error)

+ OnAuthorizationURL func(url string)

+ OnBrowserError func(err error)

+ OpenBrowser bool

+ Timeout time.Duration

+ type Manager struct

+ func Default() *Manager

+ func NewManager(store *Store) *Manager

+ func (m *Manager) ClientCredentialsTransport(ctx context.Context, serverName string, resolved config.MCPServer, ...) (http.RoundTripper, error)

+ func (m *Manager) Do401(serverName string, token string, fn func() error) error

+ func (m *Manager) HandleInsufficientScope(serverName string, challenged []string) error

+ func (m *Manager) HasTokens(serverName, serverURL string) bool

+ func (m *Manager) InvalidateClientRegistration(serverName string) error

+ func (m *Manager) InvalidateIfDiskChanged(serverName string) error

+ func (m *Manager) Login(ctx context.Context, serverName string, srv config.MCPServer, p LoginPrompt) error

+ func (m *Manager) LoginClientCredentials(ctx context.Context, serverName string, srv config.MCPServer) error

+ func (m *Manager) Logout(serverName string) error

+ func (m *Manager) OAuthConfig(serverName string, srv config.MCPServer) (transport.OAuthConfig, error)

+ func (m *Manager) PersistClientRegistration(serverName, serverURL string, h *transport.OAuthHandler) error

+ func (m *Manager) RecordGrantedScopes(serverName string, scopes []string) error

+ func (m *Manager) Status(serverName string, srv config.MCPServer) StatusInfo

+ func (m *Manager) StepUpScopes(serverName string, challenged []string) []string

+ func (m *Manager) Store() *Store

+ type Metadata struct

+ AuthorizationResponseIssParameterSupported bool

+ Issuer string

+ type ScopeCapturingTransport struct

+ func NewScopeCapturingTransport(base http.RoundTripper) *ScopeCapturingTransport

+ func (t *ScopeCapturingTransport) LastChallenge() (Challenge, bool)

+ func (t *ScopeCapturingTransport) RoundTrip(req *http.Request) (*http.Response, error)

+ type ServerTokenStore struct

+ func NewServerTokenStore(store *Store, serverName, serverURL string) *ServerTokenStore

+ func (s *ServerTokenStore) GetToken(ctx context.Context) (*transport.Token, error)

+ func (s *ServerTokenStore) SaveToken(ctx context.Context, token *transport.Token) error

+ type StatusInfo struct

+ AuthType string

+ ClientID string

+ DynamicallyRegistered bool

+ Expired bool

+ ExpiresAt time.Time

+ HasTokens bool

+ ServerName string

+ ServerURL string

+ type Store struct

+ func DefaultStore() *Store

+ func New(path string) *Store

+ func (s *Store) All() (map[string]Entry, error)

+ func (s *Store) Get(name string) (*Entry, bool, error)

+ func (s *Store) GetForURL(name, serverURL string) (*Entry, bool, error)

+ func (s *Store) ModTime() (time.Time, error)

+ func (s *Store) Path() string

+ func (s *Store) Remove(name string) error

+ func (s *Store) Set(name string, e *Entry) error

+ func (s *Store) UpdateClientInfo(name string, ci *ClientInfo, serverURL string) error

+ func (s *Store) UpdateMetadata(name string, md *Metadata, serverURL string) error

+ func (s *Store) UpdateRequestedScopes(name string, scopes []string, serverURL string) error

+ func (s *Store) UpdateTokens(name string, t *Tokens, serverURL string) error

+ type Tokens struct

+ AccessToken string

+ ExpiresAt time.Time

+ RefreshToken string

+ Scope string

+ TokenType string