mcp-use 1.6.3-canary.0 → 1.7.0-canary.1

package/dist/src/server/mcp-server.d.ts

@@ -76,8 +76,8 @@ export interface ToolContext {
 }
 import type { RequestOptions } from "@modelcontextprotocol/sdk/shared/protocol.js";
 import { type Hono as HonoType } from "hono";
-import type { PromptDefinition, ResourceDefinition, ResourceTemplateDefinition, ServerConfig, ToolDefinition, UIResourceDefinition } from "./types/index.js";
-export declare class McpServer {
+import type { PromptDefinition, ResourceDefinition, ResourceTemplateDefinition, ServerConfig, ToolDefinition, ToolCallback, UIResourceDefinition, InferToolInput, InferToolOutput } from "./types/index.js";
+export declare class McpServer<HasOAuth extends boolean = false> {
     private server;
     private config;
     private app;
@@ -92,6 +92,10 @@ export declare class McpServer {
     private buildId?;
     private sessions;
     private idleCleanupInterval?;
+    private oauthProvider?;
+    private oauthMiddleware?;
+    private oauthConfig?;
+    private oauthSetupComplete;
     /**
      * Creates a new MCP server instance with Hono integration
      *
@@ -114,6 +118,15 @@ export declare class McpServer {
      * @returns Array of URLs to add to CSP resource_domains
      */
     private getCSPUrls;
+    /**
+     * Setup OAuth authentication
+     *
+     * Initializes OAuth provider, creates bearer auth middleware,
+     * sets up OAuth routes, and applies auth to /mcp endpoints.
+     *
+     * @private
+     */
+    private setupOAuth;
     /**
      * Define a static resource that can be accessed by clients
      *
@@ -198,34 +211,47 @@ export declare class McpServer {
      *
      * @param toolDefinition - Configuration object containing tool metadata and handler function
      * @param toolDefinition.name - Unique identifier for the tool
-     * @param toolDefinition.description - Human-readable description of what the tool does
-     * @param toolDefinition.inputs - Array of input parameter definitions with types and validation
+     * @param toolDefinition.description - Optional human-readable description of what the tool does
+     * @param toolDefinition.inputs - Array of input parameter definitions (legacy, use schema instead)
+     * @param toolDefinition.schema - Zod object schema for input validation (preferred)
+     * @param toolDefinition.outputSchema - Zod object schema for structured output validation
      * @param toolDefinition.cb - Async callback function that executes the tool logic with provided parameters
      * @param toolDefinition._meta - Optional metadata for the tool (e.g. Apps SDK metadata)
+     * @param callback - Optional separate callback function (alternative to cb property)
      * @returns The server instance for method chaining
      *
      * @example
      * ```typescript
+     * // Using Zod schema (preferred)
      * server.tool({
      *   name: 'calculate',
      *   description: 'Performs mathematical calculations',
-     *   inputs: [
-     *     { name: 'expression', type: 'string', required: true },
-     *     { name: 'precision', type: 'number', required: false }
-     *   ],
+     *   schema: z.object({
+     *     expression: z.string(),
+     *     precision: z.number().optional()
+     *   }),
      *   cb: async ({ expression, precision = 2 }) => {
      *     const result = eval(expression)
-     *     return { result: Number(result.toFixed(precision)) }
-     *   },
-     *   _meta: {
-     *     'openai/outputTemplate': 'ui://widgets/calculator',
-     *     'openai/toolInvocation/invoking': 'Calculating...',
-     *     'openai/toolInvocation/invoked': 'Calculation complete'
+     *     return text(`Result: ${result.toFixed(precision)}`)
      *   }
      * })
+     *
+     * // Using legacy inputs array
+     * server.tool({
+     *   name: 'greet',
+     *   inputs: [{ name: 'name', type: 'string', required: true }],
+     *   cb: async ({ name }) => text(`Hello, ${name}!`)
+     * })
+     *
+     * // With separate callback for better typing
+     * server.tool({
+     *   name: 'add',
+     *   schema: z.object({ a: z.number(), b: z.number() })
+     * }, async ({ a, b }) => text(`${a + b}`))
      * ```
      */
-    tool(toolDefinition: ToolDefinition): this;
+    tool<T extends ToolDefinition<any, any, HasOAuth>>(toolDefinition: T, callback: ToolCallback<InferToolInput<T>, InferToolOutput<T>, HasOAuth>): this;
+    tool<T extends ToolDefinition<any, any, HasOAuth>>(toolDefinition: T): this;
     /**
      * Define a prompt template
      *
@@ -389,19 +415,6 @@ export declare class McpServer {
      * @returns Widget URI with build ID if available
      */
     private generateWidgetUri;
-    /**
-     * Build a complete URL for a widget including query parameters
-     *
-     * Constructs the full URL to access a widget's iframe, encoding any provided
-     * parameters as query string parameters. Complex objects are JSON-stringified
-     * for transmission.
-     *
-     * @private
-     * @param widget - Widget name/identifier
-     * @param params - Parameters to encode in the URL
-     * @returns Complete URL with encoded parameters
-     */
-    private buildWidgetUrl;
     /**
      * Convert widget props definition to tool input schema
      *
@@ -744,22 +757,12 @@ export declare class McpServer {
      */
     private setupWidgetRoutes;
     /**
-     * Create input schema for resource templates
-     *
-     * Parses a URI template string to extract parameter names and generates a Zod
-     * validation schema for those parameters. Used internally for validating resource
-     * template parameters before processing requests.
-     *
-     * @param uriTemplate - URI template string with parameter placeholders (e.g., "/users/{id}/posts/{postId}")
-     * @returns Object mapping parameter names to Zod string schemas
+     * Convert a Zod object schema to the internal Record<string, z.ZodSchema> format
      *
-     * @example
-     * ```typescript
-     * const schema = this.createInputSchema("/users/{id}/posts/{postId}")
-     * // Returns: { id: z.string(), postId: z.string() }
-     * ```
+     * @param zodSchema - Zod object schema to convert
+     * @returns Object mapping parameter names to Zod validation schemas
      */
-    private createInputSchema;
+    private convertZodSchemaToParams;
     /**
      * Create input schema for tools
      *
@@ -780,43 +783,6 @@ export declare class McpServer {
      * ```
      */
     private createParamsSchema;
-    /**
-     * Create arguments schema for prompts
-     *
-     * Converts prompt argument definitions into Zod validation schemas for runtime validation.
-     * Supports common data types (string, number, boolean, object, array) and optional
-     * parameters. Used internally when registering prompt templates with the MCP server.
-     *
-     * @param inputs - Array of argument definitions with name, type, and optional flag
-     * @returns Object mapping argument names to Zod validation schemas
-     *
-     * @example
-     * ```typescript
-     * const schema = this.createPromptArgsSchema([
-     *   { name: 'topic', type: 'string', required: true },
-     *   { name: 'style', type: 'string', required: false }
-     * ])
-     * // Returns: { topic: z.string(), style: z.string().optional() }
-     * ```
-     */
-    private createPromptArgsSchema;
-    /**
-     * Extract parameter names from URI template
-     *
-     * Parses a URI template string to extract parameter names enclosed in curly braces.
-     * Used internally to identify dynamic parameters in resource templates and generate
-     * appropriate validation schemas.
-     *
-     * @param uriTemplate - URI template string with parameter placeholders (e.g., "/users/{id}/posts/{postId}")
-     * @returns Array of parameter names found in the template
-     *
-     * @example
-     * ```typescript
-     * const params = this.extractTemplateParams("/users/{id}/posts/{postId}")
-     * // Returns: ["id", "postId"]
-     * ```
-     */
-    private extractTemplateParams;
     /**
      * Parse parameter values from a URI based on a template
      *
@@ -835,7 +801,7 @@ export declare class McpServer {
      */
     private parseTemplateUri;
 }
-export type McpServerInstance = Omit<McpServer, keyof HonoType> & HonoType & {
+export type McpServerInstance<HasOAuth extends boolean = false> = Omit<McpServer<HasOAuth>, keyof HonoType> & HonoType & {
     getHandler: (options?: {
         provider?: "supabase" | "cloudflare" | "deno-deploy";
     }) => Promise<(req: Request) => Promise<Response>>;
@@ -886,5 +852,8 @@ export type McpServerInstance = Omit<McpServer, keyof HonoType> & HonoType & {
  * })
  * ```
  */
-export declare function createMCPServer(name: string, config?: Partial<ServerConfig>): McpServerInstance;
+export declare function createMCPServer(name: string, config: Partial<ServerConfig> & {
+    oauth: NonNullable<ServerConfig["oauth"]>;
+}): McpServerInstance<true>;
+export declare function createMCPServer(name: string, config?: Partial<ServerConfig>): McpServerInstance<false>;
 //# sourceMappingURL=mcp-server.d.ts.map

package/dist/src/server/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../../src/server/mcp-server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EAEpB,MAAM,oCAAoC,CAAC;AAE5C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,IAAI,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,MAAM,EAAE,CACN,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,EAAE,aAAa,KACpB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,CACf,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AACD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAsB,KAAK,IAAI,IAAI,QAAQ,EAAa,MAAM,MAAM,CAAC;AAkB5E,OAAO,KAAK,EAEV,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,EAC1B,YAAY,EACZ,cAAc,EAEd,oBAAoB,EAErB,MAAM,kBAAkB,CAAC;AA4G1B,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,GAAG,CAAW;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,iBAAiB,CAAgB;IACzC,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,QAAQ,CAMZ;IACJ,OAAO,CAAC,mBAAmB,CAAC,CAAiB;IAE7C;;;;;;;;;OASG;gBACS,MAAM,EAAE,YAAY;IAwGhC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAiBlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,IAAI;IAkBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,gBAAgB,CACd,0BAA0B,EAAE,0BAA0B,GACrD,IAAI;IA+CP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,IAAI,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI;IAgJ1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI;IAiBhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,aAAa,CACjB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,UAAU,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI;IAwKlD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IA2C9B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,cAAc;IAsBtB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;;;OASG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;OAKG;YACW,iBAAiB;IAkB/B;;;;;;;;;;OAUG;IACG,YAAY,CAAC,OAAO,CAAC,EAAE;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjB;;;;;;;;;;;;OAYG;YACW,eAAe;IAuhB7B;;;;;;;;;;;OAWG;YACW,sBAAsB;IAmOpC;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;;;OAkBG;YACW,QAAQ;IA2rBtB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuBpB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6G1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACG,UAAU,CAAC,OAAO,CAAC,EAAE;QACzB,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;KACtD,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAiEhD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAI7B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IAoBhB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,yBAAyB,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC;IAyBnB,OAAO,CAAC,sBAAsB,CAAC,CAEL;IAE1B;;;;;;;;;;;;;;;;;;OAkBG;IACH,cAAc,CACZ,QAAQ,EAAE,CACR,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,KACzC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACxB,IAAI;IAKP;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAkCxD;;;;;;;;;;;;;;;;;;;;;OAqBG;YACW,cAAc;IAwC5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,iBAAiB;IAoLzB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,kBAAkB;IA+C1B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,gBAAgB;CA4BzB;AAED,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,QAAQ,CAAC,GAC7D,QAAQ,GAAG;IACT,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE;QACrB,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;KACtD,KAAK,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;CACpD,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GACjC,iBAAiB,CAWnB"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../../src/server/mcp-server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EAEpB,MAAM,oCAAoC,CAAC;AAG5C;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,IAAI,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,MAAM,EAAE,CACN,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,EAAE,aAAa,KACpB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,CACf,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AACD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAsB,KAAK,IAAI,IAAI,QAAQ,EAAa,MAAM,MAAM,CAAC;AAa5E,OAAO,KAAK,EAEV,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,EAC1B,YAAY,EACZ,cAAc,EACd,YAAY,EAEZ,oBAAoB,EAEpB,cAAc,EACd,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAa1B,qBAAa,SAAS,CAAC,QAAQ,SAAS,OAAO,GAAG,KAAK;IACrD,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,GAAG,CAAW;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,iBAAiB,CAAgB;IACzC,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,QAAQ,CAOZ;IACJ,OAAO,CAAC,mBAAmB,CAAC,CAAiB;IAC7C,OAAO,CAAC,aAAa,CAAC,CAAM;IAC5B,OAAO,CAAC,eAAe,CAAC,CAAM;IAC9B,OAAO,CAAC,WAAW,CAAC,CAAM;IAC1B,OAAO,CAAC,kBAAkB,CAAS;IAEnC;;;;;;;;;OASG;gBACS,MAAM,EAAE,YAAY;IA6GhC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAiBlB;;;;;;;OAOG;YACW,UAAU;IA0CxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,IAAI;IAkBtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,gBAAgB,CACd,0BAA0B,EAAE,0BAA0B,GACrD,IAAI;IA+CP;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IAEH,IAAI,CAAC,CAAC,SAAS,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAC/C,cAAc,EAAE,CAAC,EACjB,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GACtE,IAAI;IAGP,IAAI,CAAC,CAAC,SAAS,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI;IAqM3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI;IAiBhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,aAAa,CACjB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAO/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,UAAU,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI;IAwKlD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IA2C9B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;;;OASG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;;OAKG;YACW,iBAAiB;IAkB/B;;;;;;;;;;OAUG;IACG,YAAY,CAAC,OAAO,CAAC,EAAE;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjB;;;;;;;;;;;;OAYG;YACW,eAAe;IAuhB7B;;;;;;;;;;;OAWG;YACW,sBAAsB;IAmOpC;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAgB9B;;;;;;;;;;;;;;;;;;OAkBG;YACW,QAAQ;IAksBtB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuBpB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkH1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACG,UAAU,CAAC,OAAO,CAAC,EAAE;QACzB,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;KACtD,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAsEhD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAI7B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IAoBhB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,yBAAyB,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC;IAyBnB,OAAO,CAAC,sBAAsB,CAAC,CAEL;IAE1B;;;;;;;;;;;;;;;;;;OAkBG;IACH,cAAc,CACZ,QAAQ,EAAE,CACR,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,KACzC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACxB,IAAI;IAKP;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAkCxD;;;;;;;;;;;;;;;;;;;;;OAqBG;YACW,cAAc;IAwC5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,iBAAiB;IAoLzB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAoBhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,kBAAkB;IA+C1B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,gBAAgB;CA4BzB;AAED,MAAM,MAAM,iBAAiB,CAAC,QAAQ,SAAS,OAAO,GAAG,KAAK,IAAI,IAAI,CACpE,SAAS,CAAC,QAAQ,CAAC,EACnB,MAAM,QAAQ,CACf,GACC,QAAQ,GAAG;IACT,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE;QACrB,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;KACtD,KAAK,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;CACpD,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAIH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;CAAE,GAC5E,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAI3B,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC7B,iBAAiB,CAAC,KAAK,CAAC,CAAC"}

package/dist/src/server/oauth/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OAuth Integration for MCP Use
+ *
+ * Provides zero-config OAuth authentication for MCP servers with support for
+ * Supabase, Auth0, Keycloak, WorkOS, and custom OAuth providers.
+ */
+export type { OAuthProvider, UserInfo } from "./providers/types.js";
+export { oauthSupabaseProvider, oauthAuth0Provider, oauthKeycloakProvider, oauthWorkOSProvider, oauthCustomProvider, type SupabaseProviderConfig, type Auth0ProviderConfig, type KeycloakProviderConfig, type WorkOSProviderConfig, type CustomProviderConfig, } from "./providers.js";
+export { createBearerAuthMiddleware } from "./middleware.js";
+export { setupOAuthRoutes } from "./routes.js";
+export { getAuth, hasScope, hasAnyScope, requireScope, requireAnyScope, } from "./utils.js";
+export type { AuthInfo } from "./utils.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/server/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/server/oauth/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGpE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,OAAO,EACP,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/server/oauth/middleware.d.ts

@@ -0,0 +1,19 @@
+/**
+ * OAuth Middleware
+ *
+ * Creates bearer authentication middleware for Hono that validates
+ * JWT tokens and attaches user information to the request context.
+ */
+import type { Context, Next } from "hono";
+import type { OAuthProvider } from "./providers/types.js";
+/**
+ * Create bearer authentication middleware for a given OAuth provider
+ *
+ * @param provider - The OAuth provider to use for token verification
+ * @param baseUrl - The base URL of the server (for WWW-Authenticate header)
+ * @returns Hono middleware function
+ */
+export declare function createBearerAuthMiddleware(provider: OAuthProvider, baseUrl?: string): (c: Context, next: Next) => Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+}, 401, "json">) | undefined>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/src/server/oauth/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../../src/server/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,aAAa,EACvB,OAAO,CAAC,EAAE,MAAM,IAEF,GAAG,OAAO,EAAE,MAAM,IAAI;;8BAyErC"}

package/dist/src/server/oauth/providers/auth0.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Auth0 OAuth Provider
+ *
+ * Implements OAuth authentication for Auth0 tenants.
+ * Supports JWKS-based JWT verification with permissions and roles.
+ */
+import type { OAuthProvider, UserInfo, Auth0OAuthConfig } from "./types.js";
+export declare class Auth0OAuthProvider implements OAuthProvider {
+    private config;
+    private issuer;
+    private jwks;
+    constructor(config: Auth0OAuthConfig);
+    private getJWKS;
+    verifyToken(token: string): Promise<any>;
+    getUserInfo(payload: any): UserInfo;
+    getIssuer(): string;
+    getAuthEndpoint(): string;
+    getTokenEndpoint(): string;
+    getScopesSupported(): string[];
+    getGrantTypesSupported(): string[];
+}
+//# sourceMappingURL=auth0.d.ts.map

package/dist/src/server/oauth/providers/auth0.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth0.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/auth0.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5E,qBAAa,kBAAmB,YAAW,aAAa;IACtD,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAsD;gBAEtD,MAAM,EAAE,gBAAgB;IAKpC,OAAO,CAAC,OAAO;IAST,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA4B9C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ;IAoBnC,SAAS,IAAI,MAAM;IAInB,eAAe,IAAI,MAAM;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,kBAAkB,IAAI,MAAM,EAAE;IAI9B,sBAAsB,IAAI,MAAM,EAAE;CAGnC"}

package/dist/src/server/oauth/providers/custom.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Custom OAuth Provider
+ *
+ * Allows users to implement custom OAuth providers with their own
+ * JWT verification logic and user info extraction.
+ */
+import type { OAuthProvider, UserInfo, CustomOAuthConfig } from "./types.js";
+export declare class CustomOAuthProvider implements OAuthProvider {
+    private config;
+    constructor(config: CustomOAuthConfig);
+    verifyToken(token: string): Promise<any>;
+    getUserInfo(payload: any): UserInfo;
+    getIssuer(): string;
+    getAuthEndpoint(): string;
+    getTokenEndpoint(): string;
+    getScopesSupported(): string[];
+    getGrantTypesSupported(): string[];
+}
+//# sourceMappingURL=custom.d.ts.map

package/dist/src/server/oauth/providers/custom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/custom.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE7E,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,iBAAiB;IAI/B,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAS9C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ;IAoBnC,SAAS,IAAI,MAAM;IAInB,eAAe,IAAI,MAAM;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,kBAAkB,IAAI,MAAM,EAAE;IAI9B,sBAAsB,IAAI,MAAM,EAAE;CAKnC"}

package/dist/src/server/oauth/providers/keycloak.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Keycloak OAuth Provider
+ *
+ * Implements OAuth authentication for Keycloak servers.
+ * Supports realm roles, client roles, and resource access.
+ */
+import type { OAuthProvider, UserInfo, KeycloakOAuthConfig } from "./types.js";
+export declare class KeycloakOAuthProvider implements OAuthProvider {
+    private config;
+    private issuer;
+    private jwks;
+    constructor(config: KeycloakOAuthConfig);
+    private getJWKS;
+    verifyToken(token: string): Promise<any>;
+    getUserInfo(payload: any): UserInfo;
+    getIssuer(): string;
+    getAuthEndpoint(): string;
+    getTokenEndpoint(): string;
+    getScopesSupported(): string[];
+    getGrantTypesSupported(): string[];
+}
+//# sourceMappingURL=keycloak.d.ts.map

package/dist/src/server/oauth/providers/keycloak.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/keycloak.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE/E,qBAAa,qBAAsB,YAAW,aAAa;IACzD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAsD;gBAEtD,MAAM,EAAE,mBAAmB;IAOvC,OAAO,CAAC,OAAO;IAST,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAgC9C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ;IA+CnC,SAAS,IAAI,MAAM;IAInB,eAAe,IAAI,MAAM;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,kBAAkB,IAAI,MAAM,EAAE;IAI9B,sBAAsB,IAAI,MAAM,EAAE;CAGnC"}

package/dist/src/server/oauth/providers/supabase.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Supabase OAuth Provider
+ *
+ * Implements OAuth authentication for Supabase projects.
+ * Supports both HS256 (legacy) and ES256 (new ECC) signing algorithms.
+ */
+import type { OAuthProvider, UserInfo, SupabaseOAuthConfig } from "./types.js";
+export declare class SupabaseOAuthProvider implements OAuthProvider {
+    private config;
+    private supabaseUrl;
+    private supabaseAuthUrl;
+    private issuer;
+    private jwks;
+    constructor(config: SupabaseOAuthConfig);
+    private getJWKS;
+    verifyToken(token: string): Promise<any>;
+    getUserInfo(payload: any): UserInfo;
+    getIssuer(): string;
+    getAuthEndpoint(): string;
+    getTokenEndpoint(): string;
+    getScopesSupported(): string[];
+    getGrantTypesSupported(): string[];
+}
+//# sourceMappingURL=supabase.d.ts.map

package/dist/src/server/oauth/providers/supabase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/supabase.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE/E,qBAAa,qBAAsB,YAAW,aAAa;IACzD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAsD;gBAEtD,MAAM,EAAE,mBAAmB;IAOvC,OAAO,CAAC,OAAO;IAST,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA+C9C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ;IAgBnC,SAAS,IAAI,MAAM;IAInB,eAAe,IAAI,MAAM;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,kBAAkB,IAAI,MAAM,EAAE;IAI9B,sBAAsB,IAAI,MAAM,EAAE;CAGnC"}

package/dist/src/server/oauth/providers/types.d.ts

@@ -0,0 +1,138 @@
+/**
+ * OAuth mode determines how the MCP server handles OAuth requests
+ */
+export type OAuthMode = "direct" | "proxy";
+/**
+ * OAuth Provider Interface
+ *
+ * Defines the contract that all OAuth providers must implement
+ * to provide authentication and authorization services.
+ */
+export interface OAuthProvider {
+    /**
+     * Verify and decode a JWT token
+     * @param token - The JWT token to verify
+     * @returns The decoded and verified token payload
+     * @throws Error if token is invalid or verification fails
+     */
+    verifyToken(token: string): Promise<any>;
+    /**
+     * Extract user information from a verified token payload
+     * @param payload - The verified JWT payload
+     * @returns User information object
+     */
+    getUserInfo(payload: any): UserInfo;
+    /**
+     * Get the OAuth issuer URL
+     * @returns The issuer URL for this provider
+     */
+    getIssuer(): string;
+    /**
+     * Get the authorization endpoint URL
+     * @returns The authorization endpoint URL
+     */
+    getAuthEndpoint(): string;
+    /**
+     * Get the token endpoint URL
+     * @returns The token endpoint URL
+     */
+    getTokenEndpoint(): string;
+    /**
+     * Get supported scopes
+     * @returns Array of supported OAuth scopes
+     */
+    getScopesSupported(): string[];
+    /**
+     * Get supported grant types
+     * @returns Array of supported grant types
+     */
+    getGrantTypesSupported(): string[];
+    /**
+     * Get the OAuth mode for this provider
+     * @returns 'direct' if clients should communicate directly with auth server,
+     *          'proxy' if MCP server should proxy OAuth requests
+     */
+    getMode?(): OAuthMode;
+    /**
+     * Get the registration endpoint URL (for direct mode with dynamic client registration)
+     * @returns The registration endpoint URL, or undefined if not supported
+     */
+    getRegistrationEndpoint?(): string | undefined;
+}
+/**
+ * User information extracted from OAuth token
+ */
+export interface UserInfo {
+    userId: string;
+    email?: string;
+    name?: string;
+    username?: string;
+    nickname?: string;
+    picture?: string;
+    roles?: string[];
+    permissions?: string[];
+    [key: string]: any;
+}
+/**
+ * Base configuration for all OAuth providers
+ */
+export interface BaseOAuthConfig {
+    provider: string;
+}
+/**
+ * Supabase OAuth provider configuration
+ */
+export interface SupabaseOAuthConfig extends BaseOAuthConfig {
+    provider: "supabase";
+    projectId: string;
+    jwtSecret?: string;
+    skipVerification?: boolean;
+}
+/**
+ * Auth0 OAuth provider configuration
+ */
+export interface Auth0OAuthConfig extends BaseOAuthConfig {
+    provider: "auth0";
+    domain: string;
+    audience: string;
+    verifyJwt?: boolean;
+}
+/**
+ * Keycloak OAuth provider configuration
+ */
+export interface KeycloakOAuthConfig extends BaseOAuthConfig {
+    provider: "keycloak";
+    serverUrl: string;
+    realm: string;
+    clientId?: string;
+    verifyJwt?: boolean;
+}
+/**
+ * WorkOS OAuth provider configuration
+ */
+export interface WorkOSOAuthConfig extends BaseOAuthConfig {
+    provider: "workos";
+    subdomain: string;
+    clientId?: string;
+    apiKey?: string;
+    verifyJwt?: boolean;
+}
+/**
+ * Custom OAuth provider configuration
+ */
+export interface CustomOAuthConfig extends BaseOAuthConfig {
+    provider: "custom";
+    issuer: string;
+    jwksUrl: string;
+    authEndpoint: string;
+    tokenEndpoint: string;
+    scopesSupported?: string[];
+    grantTypesSupported?: string[];
+    verifyToken: (token: string) => Promise<any>;
+    getUserInfo?: (payload: any) => UserInfo;
+}
+/**
+ * Union type of all OAuth provider configurations
+ */
+export type OAuthConfig = SupabaseOAuthConfig | Auth0OAuthConfig | KeycloakOAuthConfig | WorkOSOAuthConfig | CustomOAuthConfig;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/server/oauth/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,QAAQ,GACR,OAAO,CAAC;AAEZ;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzC;;;;OAIG;IACH,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ,CAAC;IAEpC;;;OAGG;IACH,SAAS,IAAI,MAAM,CAAC;IAEpB;;;OAGG;IACH,eAAe,IAAI,MAAM,CAAC;IAE1B;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAAC;IAE3B;;;OAGG;IACH,kBAAkB,IAAI,MAAM,EAAE,CAAC;IAE/B;;;OAGG;IACH,sBAAsB,IAAI,MAAM,EAAE,CAAC;IAEnC;;;;OAIG;IACH,OAAO,CAAC,IAAI,SAAS,CAAC;IAEtB;;;OAGG;IACH,uBAAuB,CAAC,IAAI,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,CAAC"}

package/dist/src/server/oauth/providers/workos.d.ts

@@ -0,0 +1,30 @@
+/**
+ * WorkOS OAuth Provider
+ *
+ * Implements OAuth authentication for WorkOS AuthKit.
+ * Supports JWKS-based JWT verification with Dynamic Client Registration.
+ *
+ * WorkOS uses "direct" mode where MCP clients communicate directly with
+ * WorkOS for OAuth flows (registration, authorization, token exchange).
+ * The MCP server only verifies tokens issued by WorkOS.
+ *
+ * Learn more: https://workos.com/docs/authkit/mcp
+ */
+import type { OAuthProvider, UserInfo, WorkOSOAuthConfig, OAuthMode } from "./types.js";
+export declare class WorkOSOAuthProvider implements OAuthProvider {
+    private config;
+    private issuer;
+    private jwks;
+    constructor(config: WorkOSOAuthConfig);
+    private getJWKS;
+    verifyToken(token: string): Promise<any>;
+    getUserInfo(payload: any): UserInfo;
+    getIssuer(): string;
+    getAuthEndpoint(): string;
+    getTokenEndpoint(): string;
+    getScopesSupported(): string[];
+    getGrantTypesSupported(): string[];
+    getMode(): OAuthMode;
+    getRegistrationEndpoint(): string | undefined;
+}
+//# sourceMappingURL=workos.d.ts.map

package/dist/src/server/oauth/providers/workos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workos.d.ts","sourceRoot":"","sources":["../../../../../src/server/oauth/providers/workos.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACV,MAAM,YAAY,CAAC;AAEpB,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAsD;gBAEtD,MAAM,EAAE,iBAAiB;IAKrC,OAAO,CAAC,OAAO;IAOT,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAyB9C,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,QAAQ;IAmBnC,SAAS,IAAI,MAAM;IAInB,eAAe,IAAI,MAAM;IAIzB,gBAAgB,IAAI,MAAM;IAI1B,kBAAkB,IAAI,MAAM,EAAE;IAI9B,sBAAsB,IAAI,MAAM,EAAE;IAIlC,OAAO,IAAI,SAAS;IAapB,uBAAuB,IAAI,MAAM,GAAG,SAAS;CAO9C"}