Repository navigation
update server examples to cover external authentication servers #658
Description
Is your feature request related to a problem? Please describe.
RFC 8707
Describe the solution you'd like
Add a new example forked from src/examples/server/simpleStreamableHttp.ts to support an external authentication server (AS).
May want to cater to JWT cases and/or absence of the (optional) introspection_endpoint & revocation_endpoint.
Describe alternatives you've considered
Modifying simpleStreamableHttp to optionally support an external AS would probably trigger a rename to complexStreamableHttp 🙈
Additional context
Beyond external AS, a new example could be used as a testing ground for OICD support (see modelcontextprotocol/modelcontextprotocol#677)
Activity
travisbreaks commentedon Mar 17, 2026
I'll put together an example for this. Will base it on the existing simpleStreamableHttp example with RFC 8707 external auth server support.
feat(examples): add external auth server example (RFC 8707)
feat(examples): add external auth server example (RFC 8707)
docs(examples): add external auth resource server example (closes mod…
docs(examples): add external auth resource server example (closes mod…
docs(examples): add external auth resource server example (closes mod…
docs(examples): add external auth resource server example (closes mod…
adarsh6980 commentedon Oct 20, 2026
Hi! I'd like to work on this. The earlier volunteer's plan from March never landed as a PR, so I'll pick it up: add a new example forked from
src/examples/server/simpleStreamableHttp.tsthat shows token validation against an external authorization server (RFC 8707 resource indicators), covering the JWT case and the case where the AS has no introspection or revocation endpoint. I'll keep the existing example untouched and follow the current auth middleware structure on main.adarsh6980 commentedon Oct 20, 2026
Correction: I missed the linked PRs when checking this issue. #1693 was already submitted and closed, and #1967 is open with an external-AS example. I'll hold off on opening a duplicate. Sorry for the noise.