By scalekit-inc
OAuth 2.1 authorization for MCP servers using Scalekit to protect tools used by AI IDEs and agents.
Diagnose and resolve common Scalekit MCP auth integration issues (handshake/metadata, cached clients, CORS/network, Claude Desktop port limits, browser launch problems), producing a step-by-step fix plan with verification commands.
Sets up Scalekit env vars, installs/initializes the SDK, and verifies credentials by listing organizations. Use proactively when user asks to set up, install, initialize, configure, or verify Scalekit.
Add OAuth 2.1 authorization to FastMCP servers using Scalekit provider plugin. Use when building FastMCP servers, when users mention FastMCP authentication, Python MCP servers with Scalekit, or need rapid OAuth integration with minimal code.
This skill documents the pattern for building production-ready MCP (Model Context Protocol) servers using Express.js, TypeScript, and OAuth 2.1 Bearer token authentication via Scalekit. This approach provides fine-grained control over HTTP request handling, middleware chains, and server behavior for Node.js-based MCP implementations.
This skill documents the pattern for building production-ready MCP (Model Context Protocol) servers using FastAPI and FastMCP with OAuth 2.1 Bearer token authentication via Scalekit. This approach provides fine-grained control over authentication middleware, token validation, and server behavior compared to using FastMCP's built-in OAuth provider.
Guides users through adding OAuth 2.1 authorization to Model Context Protocol (MCP) servers using Scalekit. Use when setting up MCP servers, implementing authentication for AI hosts like Claude Desktop, Cursor, or VS Code, or when users mention MCP security, OAuth, or Scalekit integration.
Walks through a structured production readiness checklist for Scalekit MCP authentication implementations. Use when the user says they are going live, launching to production, doing a pre-launch review, or wants to verify their MCP server authentication is production-ready.
External network access
Connects to servers outside your machine
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Scalekit Auth Plugins for Claude Code — the auth stack for agents.
Add SSO, SCIM, MCP Auth, agent auth, and tool-calling from your Claude Code editor.
Setting up auth for B2B and AI apps is complex. Between auth flows, SSO providers, SCIM provisioning, MCP auth, and securing AI agents, most developers spend weeks on auth instead of shipping features with confidence.
This plugin adds the complete Scalekit auth stack to your projects — whether that's a B2B app, AI agent, or MCP server — directly from Claude Code.

# Start Claude REPL
claude
# Add Scalekit Auth Stack marketplace
/plugin marketplace add scalekit-inc/claude-code-authstack
# Run the plugins wizard
/plugin
| Plugin | Description |
|---|---|
| Dryrun | Validate auth and provisioning flows before deployment. Test your configuration against real identity providers without touching production. |
| MCP Auth | Add OAuth 2.1 authorization to Model Context Protocol servers. Guides you through token handling, refresh flows, and scope management. |
| Modular SSO | Integrate enterprise SSO providers (Okta, JumpCloud, Entra ID, etc.). Support 20+ identity providers without writing SAML parsers. |
| Modular SCIM | Enable user provisioning and directory sync. Let customers provision users automatically from their identity provider. |
| Full Stack Auth | Complete authentication setup for web applications. End-to-end auth including login pages, session management, and protected routes. |
| Agent Auth | Secure authentication for AI agents and services. OAuth flows designed for AI agents with token persistence and refresh logic. |
After installing the marketplace, choose a plugin based on your use case:
/plugin install mcp-auth
Use this to secure your MCP servers with OAuth 2.1 authorization.
/plugin install modular-sso
Use this to add SAML/OIDC SSO with providers like Okta, JumpCloud, or Entra ID.
/plugin install agent-auth
Use this to add authentication for AI agents that act on behalf of users.
/plugin install modular-scim
Use this to enable SCIM directory sync for automatic user provisioning.
.
├── plugins/
│ ├── dryrun/ # Validate auth flows before deployment
│ ├── mcp-auth/ # OAuth 2.1 for MCP servers
│ ├── modular-sso/ # Enterprise SSO integration
│ ├── modular-scim/ # SCIM provisioning
│ ├── full-stack-auth/ # Complete web app auth
│ └── agent-auth/ # AI agent authentication
├── images/ # Documentation images
├── AGENTS.md # Contribution guidelines
└── LICENSE # MIT License
client_id and client_secretContributions are welcome! Please see AGENTS.md for contribution guidelines.
git checkout -b feature/my-pluginThis project is licensed under the MIT license. See the LICENSE file for more information.
Scalekit actions playground in your Claude Code
SCIM webhook provisioning with Scalekit for real-time user and group lifecycle management.
Modular SSO flows using Scalekit for apps with existing user management, including IdP-initiated login and enterprise onboarding.
Implements Scalekit Agent Auth so AI agents can act in third-party apps (Gmail, Slack, Calendar, Notion) on behalf of users.
Production-ready authentication flows (sign-up, login, logout, sessions) using Scalekit full-stack auth across common stacks.
npx claudepluginhub scalekit-inc/claude-code-authstack --plugin mcp-authWorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
Centralized Claude Code configuration: Docker-first guards, permissions, MCP gateway, and workflow skills
Claude Code skill pack for Clerk authentication (24 skills)
Auth0 skills for quickstarts, migration, MFA, branding, custom domains, Advanced Custom Universal Login (ACUL) screen generation, and framework-specific SDK integrations for React, Next.js, Vue, Nuxt, Angular, Express, Fastify, FastAPI, Flask, Go, Spring Boot, Java MVC, Swift, Android, ASP.NET Core, React Native, Expo, Ionic React (Capacitor), Ionic Angular (Capacitor), and Ionic Vue (Capacitor).
Manage MCP servers - discover, analyze, execute tools/prompts/resources. Use for MCP integrations, capability discovery, tool filtering, programmatic execution, or encountering context bloat, server configuration, tool execution errors.
MCP server development helper with tool and resource scaffolding