Details

Securing an MCP server starts with a question the protocol does not answer for you: who is making this call? This webinar builds both answers in Python. Dan Moore stands up an unauthenticated MCP server, calls it with curl and from Claude Desktop, then rebuilds the same server behind OAuth with FusionAuth as the authorization server.

You will see the five steps of the MCP authentication flow, the two ways an MCP client can register with an authorization server, what a valid access token must contain before your server honors it, and where the security work the specification does not cover still has to happen.

‍