74
/ 100
2 days ago
glama
OAuth MCP Framework
A minimal MCP server framework for single-owner production deployments using OAuth authorization code flow with PKCE, providing endpoints for MCP, authorization, token, and metadata.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 3 credentials: BLOB_READ_WRITE_TOKEN, MCP_AUTH_PASSWORD, OAUTH_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
BLOB_READ_WRITE_TOKEN— ：连接 Blob Store 后自动注入config
BLOB_STORE_ID🔐 secret
MCP_AUTH_PASSWORD— 增加 （至少 16 个随机字符）后，授权页必须验证该密码才会签发授权码。适合个人或小范围共享；需要用户身份、权限隔离和审计时，应接入外部身份提供商。config
MCP_RESOURCE_URL— ：使用默认生产域名时自动推导🔐 secret
OAUTH_SECRET— 环境变量 ：至少 32 字符的独立随机值// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/0xagentlabs-oauth-mcp-framework-v0l9o8)commit: ae07d39693c28a6510ce970870c28492235ae569
code hash: 577166802bde4acd47873e587d297ff546424408985410cb72f2eeaaaa1334f6
verified: 7/29/2026, 9:14:55 AM