AuthPlane is an open-source OAuth 2.1 authorization server built for the Model Context Protocol, MCP, one Go binary, deployed on your own infrastructure.

---

Product or Service Overview

AuthPlane is a complete OAuth 2.1 authorization server for the Model Context Protocol — token issuance, discovery, IdP federation, delegation, upstream-token vault, agent identity, and an admin UI — shipped today as one self-contained binary you run next to your MCP server, with a managed cloud offering (same product, same guarantees) landing shortly.

Concretely, AuthPlane owns everything the MCP authorization spec asks for: it tells the client where to send the user for consent, mints access tokens bound to a specific resource server, and enforces proof-of-possession on every call. It holds the OAuth endpoints (/oauth/authorize, /oauth/token, /oauth/register, /oauth/revoke, /oauth/introspect), signs the tokens, and publishes the metadata your MCP clients discover. Your MCP server validates the tokens locally against the AuthPlane JWKS. No per-request round-trip. No library that owns your request handler.