Open source OAuth 2.1 authorization for MCP servers. Self-hosted. One binary. Production-grade MCP auth in under 10 minutes.
Palo Alto, CA
- Tweets 95
- Following 12
- Followers 20
- Likes 10
Pinned Tweet
Is your MCP secure? Not sure? We just launched AuthScanner so you can find out in a couple of minutes.
AuthScanner is a free tool that checks how your MCP server handles OAuth and authentication, then gives you a clear report on what's working, what's not, and how to fix it.
Heading to #AGNTCon + #MCPCon Europe in Amsterdam next week? Stop by the AuthPlane booth and we'll run a scan with you.
#MCP #OAuth #AgenticAI #AIAgents #APISecurity
authscanner.ai/
2
3
2
190
AuthPlane now supports MCP 2026-07-28, the largest auth revision since the protocol launched.
What's in it:
- CIMD replaces Dynamic Client Registration
- RFC 9207 issuer validation on every auth response
- Credentials bound to the issuing AS
- offline_access for refresh tokens
- Standardized scope step-up
Open source. Self-hosted. OAuth 2.1 built for agents.
#MCP #AI #AIagents
1
18
We just shipped SDKs across five languages.
C# / .NET: our first release. AuthPlane SDK targets .NET 8 and .NET 10.
Java: now on Maven Central as ai.authplane.sdk, with adapters for the official MCP Java SDK and Spring Boot. v0.2.0 follows key rotation on your authorization server automatically. Requires Java 21+.
Go: v0.3.0 tightens issuer validation across the whole SDK per RFC 8414. Breaking change, check the changelog before you upgrade.
TypeScript: v0.4 adds native support for Hono and NestJS and integrates with the official MCP TypeScript SDK's auth middleware. Also a breaking change; read the migration notes first.
Python: v0.4 adds fail-closed behavior for FastMCP and MCP servers, so requests are turned away when revocation status can't be confirmed, and adds stricter validation at startup.
Pick your language, install from your package manager of choice, and protect your first endpoint today.
#OAuth #MCP #DeveloperTools #SDK
2
1
3
102
Excited to be heading to #AGNTCon + #MCPCon Europe on September 17-18 in Amsterdam. The agenda is packed with real talk on what it takes to actually build and scale agentic AI systems in production: orchestration, infrastructure, evaluation, resilience, observability, debugging, all of it. If you're going too, would love to connect there. @linuxfoundation
Schedule ➡️ bit.ly/4fIOhmu
Register ➡️ bit.ly/4xRZN6j
70
The winner of the AuthPlane x Skybridge Speedrun Challenge is Tanish Desai, with his app, Rolelense. We would like to thank all the participants who submitted a project and made this competition a tough one. We will share other submissions as well, since they were Sooo good and deserve a spotlight.
Special shout-out to our partner @alpic_ai whose platform made these apps possible!
Congrats again Tanish!!
2
55
Last day of the Speedrun Challenge. Submissions close tonight at 11:59pm your local time.
If you've got something running, five minutes of video is all we need. Send it in.
champ.ly/tUZ0lKNQ
1
46
The Speedrun Challenge closes Monday, so you've got the weekend.
Build something with Skybridge, put AuthPlane in front of it, send us five minutes of video. That's all it is. And if you're stuck somewhere, reply and we'll help you sort it out.
$500, deadline Aug 31.
champ.ly/tUZ0lKNQ
1
1
92
AuthPlane retweeted
There is one week left to enter the Skybridge x @AuthPlane Speedrun Challenge!
Stuck on the build? DM us and we'll help.
The winner will get $500, don't miss your chance. More info: authplane.ai/challenge/
2
5
50
One week left in the AuthPlane x Skybridge Speedrun Challenge. Office hours today for anyone stuck on setup. $500 prize, deadline Aug 31.
champ.ly/tUZ0lKNQ
1
43
If you're looking at Keycloak for MCP auth, its docs and its code disagree.
RFC 8707 has shipped since 26.6, but it's experimental and off by default. The MCP guide still says "Not supported" and has you building audience mappers by hand.
Verified against the 26.7.1 source:
champ.ly/koklRuO7
1
1
66
The Speedrun Challenge is underway and there's plenty of time left.
Skybridge is a React framework, so most of it will feel familiar. AuthPlane goes in front with one docker run. Five minutes of video showing it working is the whole submission.
$500, closing Aug 31.
champ.ly/FYDxFYlV
1
2
53
If you're building with AI agents, this is where you want to be.
We’'ll be at #AGNTCon + #MCPCon North America, connecting with developers, maintainers, founders, and the teams shaping the future of agentic AI. Meet us there!
San Jose | October 22–23
Explore the schedule: bit.ly/4f6Pp35
Grab your pass: bit.ly/44MI7LM
1
31
Starting today, the AuthPlane x Skybridge Speedrun Challenge asks developers to build a real MCP App with Skybridge (the open source React framework for MCP Apps) and secure it with AuthPlane.
The ask: a five-minute video showing it working. The prize: $500. The window: two weeks, closing Aug 31.
Full rules: champ.ly/tUZ0lKNQ
2
3
123
If your MCP server runs on your laptop and you're the only one using it, the API key in your .env is fine. The spec says so too.
It's when the server goes remote that the key starts costing you. It never expires unless you go rotate it, and your server can't tell who's actually behind a call.
We wrote about where that line is:
champ.ly/bLmdSwHA
1
43
AuthPlane v0.1.1 is live, a security maintenance release.
It's toolchain and dependency updates that matter if you're running this on your own infrastructure.
This is the kind of release that doesn't make headlines but is exactly why self-hosting your auth layer means staying on top of it.
Full changelog and upgrade notes in the first comment.
1
1
18
Full changelog and upgrade notes: champ.ly/GzzQU9rg
3
The AuthPlane × Skybridge Speedrun Challenge opens Monday.
Build an MCP App with Skybridge from @alpic_ai . Secure it with AuthPlane. Film 5 minutes of it working end-to-end.
$500 for the best one. Closes Aug 31.
Rules: champ.ly/tUZ0lKNQ
#hackathon #AI #claudepro #MCP #Oauth
1
5
128