An MCP server is a project type for Model Context Protocol endpoints. Agents must authenticate before they can call a tool. Create one from Projects by choosing MCP server.
MCP Auth appears in the sidebar only for that project type.
Playground
Open MCP Auth. Connect with SSO to mint a short-lived bearer for the environment, then import tools. Tokens are scoped to the selected environment — use dev while iterating.
A successful playground call proves this console session can invoke that tool on that server. It does not authorize every agent identity in the trust store. Register those in Agents (sales-gated).
After registration
| Job | Where |
|---|---|
| Clients and scopes | Authentication |
| Which agents may call this server | Agents |
| Which tools an agent may call | Authorization |
| Call history | Agents activity, or Audit |
| Abuse on the auth surface | Lidar |
| Server credentials | Vault |
Each project can hold several environments, so staging tools never resolve in production.
Controls in `@authdog/mcp-sdk`
These run inside your server. Each is opt-in.
- Trust store — verified non-human identities from Agents. Issuer revoke blocks new tokens when the subject is the OIDC
client_id. Outstanding JWTs stay valid until expiry unless this control is in enforce. - Per-tool authorization — AuthZEN check before the tool runs.
- Audit — invocation, denial, failure. No raw arguments.
- Threat detection — Lidar signals for poisoning, injection, exfil, rate abuse.
Happy path is enforce. Use off / monitor only while staging. See MCP security and machine identity.
@authdog/mcp-sdk is source-only in the Authdog monorepo (packages/mcp-sdk). It is not published on npm.
Related
| Read | To learn how to |
|---|---|
| Projects | Register an MCP server |
| Authorization | Scope tools |
| Agents | Register, verify, and revoke agent identities |
| Lidar | Detect abuse |
| Machine identity | Pick M2M, Agents, service account, or PAT |