Secure Your MCP Servers With OAuth, JWT, SPIFFE and More
summary
Demo builds a simple echo MCP server (runs on port 8000) and first adds OAuth by wiring Keycloak into the server, getting a JWT via the MCP Inspector and proving a 401 becomes a successful call; then swaps to an MCP gateway on port 9000 that enforces OAuth/JWT-based authn/authz and multiplexes two backends (echo and time) without changing or redeploying servers. Also shows AI agent access secured via SPIFFE/JWT.
AI-written summary · about
chapters (6)
- 0:00MCP server security intro
- 4:58Simple MCP server
- 8:12OAuth for MCP server
- 13:56MCP gateway overview
- 17:26JWT gateway config
- 22:51Summary
related talks
26mSecure Your MCP Servers with OAuth, JWT, SPIFFE and More
45mSecuring MCP Servers with Spring AI
11mLightning Talk: Effortlessly Integrating Keycloak Authentication To Your MCP Servers
25mOAuth Gets You In, Zero Trust Keeps You Safe
32mAI Agents with Keycloak in MCP
25mYour Insecure MCP Server Won't Survive Production
29mKeeping Agents in Check: Apollo MCP Authentication
20mLetting AI Interface with Your App with MCPs