quickoauth

Prompts

Each card's body is the prompt. Fill in the bracketed placeholders, paste it into Claude Code or your agent of choice, and it carries the endpoint requirements so you don't have to.

Add OAuth to a FastMCP server

Point an agent at your FastMCP codebase and have it wire bearer-token auth plus the discovery endpoints MCP clients require.

fastmcp

Put Auth0 in front of an existing MCP endpoint

Build the thin proxy that owns discovery and DCR on your domain while Auth0 handles login and tokens — accepting Claude, ChatGPT, and Grok as clients.

auth0

Auth0 as MCP authorization server — native, no proxy

Configure a 2026 Auth0 tenant for MCP connectors entirely through the Management API: DCR flag, resource-parameter audience profile, CIMD, and a JWKS-validating resource server.

auth0

Diagnose a failing claude.ai connector

A systematic run of the seven checks that isolate where an MCP OAuth connection breaks.

claude-connector

Stytch Connected Apps in front of an MCP server

Enable Connected Apps, dodge the project-domain metadata trap, host the authorization page, and validate Stytch JWTs — with M2M-based headless tests.

stytch

OAuth for an MCP server on Cloudflare Workers

Wrap a Workers-hosted MCP server with workers-oauth-provider so discovery, DCR, and tokens all live on the Worker.

cloudflare-workers

Serve an MCP endpoint behind Caddy with auto-TLS

Route /mcp and the OAuth discovery endpoints through Caddy with a Let's Encrypt certificate that renews itself.

caddy

Supabase Auth OAuth Server for an MCP connector

Enable Supabase's OAuth Server beta, force the DCR toggle through the Management API, and validate the ES256 tokens in your MCP server — plus a fully headless CI proof.

supabase

Make my MCP server work as a ChatGPT connector

Wire the redirect URI, CIMD/DCR client identification, and discovery endpoints ChatGPT expects from a custom MCP connector.

chatgpt-connector

Add my MCP server to Grok

Prepare an OAuth-protected MCP server for Grok's Bring Your Own MCP connectors, without hardcoding callback URLs that may change.

grok-connector

Self-host the OAuth server with Ory Hydra

Stand up your own authorization server for MCP connectors — Hydra on loopback behind Caddy, DCR enabled, the null-scrubbing registration proxy, and offline JWT validation.

hydra