Skip to content
Scalekit Docs
Talk to an Engineer Dashboard

MCP quickstart with AI coding agents

Use AI coding agents to add OAuth 2.1 authentication to your MCP servers in minutes

Use AI coding agents to add Scalekit’s OAuth 2.1 authentication to your MCP servers. The agent analyzes your codebase, applies consistent authentication patterns, and generates production-ready code that integrates OAuth 2.1 end-to-end.

Prerequisites

  • A Scalekit account with MCP server management access
  • Basic familiarity with OAuth 2.1 and MCP server architecture
npx @scalekit-inc/cli setup
Claude Code Cursor GitHub Copilot Codex 40+ more

  1. Generate authentication implementation

    Section titled “Generate authentication implementation”

    Copy this prompt into your coding agent:

    MCP Auth implementation prompt
    Add OAuth 2.1 authentication to my MCP server using Scalekit. Initialize ScalekitClient with environment credentials, implement /.well-known/ metadata endpoint for discovery, and add authentication middleware that validates JWT bearer tokens on all MCP requests. Code only.

  2. Verify the implementation

    Section titled “Verify the implementation”

    Check that generated files include:

    • Authentication middleware with JWT validation
    • Environment variable configuration (.env.example)
    • OAuth discovery endpoint (/.well-known/oauth-authorization-server)
    • Error handling for invalid or expired tokens

Next steps

Section titled “Next steps”

Your MCP server now has OAuth 2.1 authentication integrated. Test the implementation with your MCP host to verify the authentication flow works correctly.

Test with MCP hosts

Section titled “Test with MCP hosts”

Connect your authenticated MCP server to any MCP-compatible host:

  • Claude Desktop or Claude Code: Configure the MCP server connection in settings
  • Cursor: Add the MCP server to your workspace configuration
  • Windsurf: Register the server in your MCP settings
  • Other MCP hosts: Follow your host’s documentation for connecting authenticated MCP servers

When you connect, the host authenticates using the OAuth 2.1 flow you configured. Verify that protected MCP resources require valid access tokens and that the discovery endpoint provides correct OAuth metadata.