Repository navigation
mcp-auth v0.3.0
Highlights
- Ships the official TypeScript SDK alongside the existing Python and Go SDKs.
- Adds runnable Python, Go, and TypeScript MCP resource-server examples.
- Expands end-to-end authorization coverage across all three SDKs, including OAuth discovery, dynamic client registration, PKCE, token validation, insufficient-scope rejection, and authenticated MCP requests.
- Fixes required-scope enforcement in the Python FastMCP integration and updates compatibility to FastMCP 4.
- Adds CodeQL analysis, a security policy, dependency audits, image scanning, and expanded project/security/official-SDK badges.
Verification
The release commit passed the complete GitHub Actions suite, including the multi-SDK E2E matrix, production-mode Compose OAuth flow, Python/Go/TypeScript tests, dependency audits, Go vulnerability scans, Docker image scan, and CodeQL.