Descope MCP Server
Authentication and authorization for MCP servers using Descope identity services.
Data last scanned today · Reviewed today
Overview
This MCP server implementation provides a framework for integrating Descope as an authorization server for your AI-based tools. It enables developers to implement token validation, enforce fine-grained scope permissions, and manage audience validation directly within their server architecture. Beyond basic authentication, the server supports policy enforcement for real-time authorization decisions based on user roles and identity. It also facilitates external token storage, allowing your AI agents to securely retrieve and manage OAuth tokens needed to interact with third-party platforms like Slack or Google Calendar.
Our verdict
With a high security risk level of 24/100, this server is currently intended for experimental use rather than production deployments. The primary concerns include its status as a community-maintained project rather than an official vendor release, as well as the lack of any specified license, which creates ambiguity regarding legal usage terms. Potential users should carefully evaluate these risks and monitor the repository, as the last commit occurred over five months ago.
- Supports secure storage for third-party OAuth tokens
- Provides framework for real-time authorization policy enforcement
- Zero direct dependencies reduces supply chain attack surface
- No license detected, creating unclear legal usage terms
- High security risk due to community-maintenance status
- Last code update occurred over 160 days ago
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What is the current programming language support for this SDK?
The Descope MCP SDK currently supports Python, with a TypeScript SDK scheduled for future release.
›What is the role of Descope when integrated with an MCP server?
Descope acts as the Authorization Server, managing token validation, scope enforcement, and audience validation for your MCP servers.
›Does the SDK provide functionality for managing third-party service tokens?
Yes, it supports external token storage for retrieving OAuth tokens used by services like Slack or Google Calendar.
›Can I perform real-time policy enforcement with this integration?
Yes, the integration allows for authorization decisions based on user identity, specific roles, and defined scopes.
Changelog
- Newdescope-mcp: v0.2.0
2026-01-29
Badge
Maintain this server? Add the live badge to your README.