A Model Context Protocol (MCP) server with OAuth 2.1 authentication, Supabase user management, and Cloudflare tunnel support. Works with ChatGPT and Claude.ai.
# Install via pipx
pipx install git+https://github.com/mokcontoro/simple_mcp_server.git
# Run (opens browser for first-time setup)
simple-mcp-serverSee docs/install.md for manual installation and troubleshooting.
- Streamable HTTP Transport: Modern MCP transport at
/mcp - OAuth 2.1: Full flow with PKCE and dynamic client registration
- Cloudflare Tunnel: Secure access via
{name}.robotmcp.ai - Creator-Only Access: Only the server creator can connect
- Optional OAuth: Disable with
ENABLE_OAUTH=false - Secure CLI Login: POST-based credential transfer (not URL params)
- WSL Support: Reliable browser opening with PowerShell fallback
simple_mcp_server/
├── main.py # FastAPI app entry point
├── tools.py # MCP tools (echo, ping) - replace for custom tools
├── cli.py # CLI daemon management
├── config.py # Config management (~/.simple-mcp-server/)
├── setup.py # Browser-based login flow
├── sse.py # Legacy SSE endpoints
└── oauth/ # OAuth module (optional)
├── endpoints.py # OAuth routes
├── middleware.py # Token validation
├── jwt_utils.py # JWT token generation/validation
├── stores.py # Session stores (auth codes, pending requests)
└── templates.py # HTML templates
Cloud Service: CLI login and tunnel creation are handled by robotmcp-cloud at https://app.robotmcp.ai.
See docs/project_plan.md for architecture details.
| Command | Description |
|---|---|
simple-mcp-server |
Start server in background |
simple-mcp-server stop |
Stop server and tunnel |
simple-mcp-server status |
Show current status |
simple-mcp-server logout |
Clear credentials and stop |
| Variable | Description |
|---|---|
SUPABASE_URL |
Supabase project URL |
SUPABASE_ANON_KEY |
Supabase anonymous key |
SUPABASE_JWT_SECRET |
JWT secret for token validation |
ENABLE_OAUTH |
Set false to disable OAuth (default: true) |
ROBOTMCP_CLOUD_URL |
Cloud service URL (default: https://app.robotmcp.ai) |
| Endpoint | Description |
|---|---|
GET / |
Server info |
POST /mcp |
Streamable HTTP transport (recommended) |
GET /sse |
Legacy SSE (backward compat) |
/.well-known/oauth-authorization-server |
OAuth metadata |
Two endpoints are available:
| Endpoint | Transport | Usage |
|---|---|---|
/mcp |
Streamable HTTP | Try first (recommended) |
/sse |
Legacy SSE | Use if /mcp doesn't work |
Client Compatibility:
- Claude.ai: Works with
/mcp(recommended) - ChatGPT: Works with
/mcp(recommended) - Legacy clients: Use
/sseif/mcpdoesn't work
Example URL:
https://{your-name}.robotmcp.ai/mcp
See docs/workflow.md for connection flow diagrams.
To add custom MCP tools, replace tools.py:
from fastmcp import FastMCP
mcp = FastMCP("my-server")
@mcp.tool()
def my_tool(param: str) -> str:
return f"Result: {param}"For ros-mcp-server merge: replace tools.py and set ENABLE_OAUTH=false.
- Installation Guide - Setup, troubleshooting, CLI reference
- Project Plan - Architecture, version history
- Workflow - Flow diagrams, components
- v1.16.2: Use importlib.metadata for version (single source of truth from pyproject.toml)
- v1.16.1: Fix SSE endpoint to support shared member access (consistent with /mcp)
- v1.16.0: Display version in CLI status output
- v1.15.0: Shared member access - users added via dashboard can now connect to shared MCP servers
- v1.14.0: Change default port from 8000 to 8766 (BREAKING: existing tunnels must be recreated with
simple-mcp-server logout && simple-mcp-server) - v1.13.0: JWT tokens for stateless OAuth (tokens survive server restarts), endpoint compatibility docs
- v1.12.0: Supabase centralized logging (replaces CloudWatch for security)
- v1.11.0: AWS CloudWatch logging integration with JSON structured logs
- v1.10.0: Comprehensive INFO-level logging for all MCP server activities
- v1.9.0: Secure POST-based CLI login, WSL browser fix, Claude theme for OAuth pages
- v1.8.0: OAuth templates, CLI improvements
- v1.7.0: Cloudflare tunnel integration
- v1.0.0: Initial release with OAuth 2.1 and Streamable HTTP
Copyright (c) 2025 Contoro. All rights reserved.
This software is proprietary and confidential. Unauthorized copying, modification, distribution, or use of this software is strictly prohibited without express written permission.