Getting ready for secure MCP with Quarkus MCP Server

[giscus[bot]]

Getting ready for secure MCP with Quarkus MCP Server

Quarkus: Supersonic Subatomic Java

https://quarkus.io/blog/secure-mcp-sse-server/

[lmccay]

This is almost the topic that I needed at the moment and definitely one that I need a little later. :)
I am looking to have my MCP Server authenticate to a remote API using the OAuth client credentials flow with a client_id and client_secret. It doesn't seem to be able to recognize the quarkus.oidc.grant.type application property even though I seem to have quarkus-oidc-client added properly. Does anyone have any experience with this?

[sberyozkin]

@lmccay client_credentials is for MCP client to acquire a token and send it to MCP server in a server to server use case, with no user authentication. As far as MCP server is concerned, it does not really mind how the access token was acquired, it deals with verifying such tokens.

Note MCP server relies on quarlus-oidc which supports either an authorization code flow or a bearer token verification.

quarkus-oidc-client is another extension for acquiring tokens with grants like client_credentials that Quarkus MCP client may support in the future, but it is not relevant to the work of Quarkus MCP server. The property you mentioned is indeed not available in the quarkus.oidc namespace, but only in the quarkus.oidc-client one.

Does it clarify it ?

[lmccay]

Yes, I think that I am aware of that. I am not concerned with the current use of my MCP Server by my colocated Goose Agent and do not require authentication there YET. I am however creating an MCP Server that must authenticate to another external API in order to fulfill the MCP client's request as part of the Tool implementation. I was using username and password in the application properties and wanted to replace them with client_id and client_secret and to acquire a JWT access token to use for API calls to the external API.

Therefore, I think that I want to use quarkus-oidc-client inside the MCP Server. Is there a conflict between the MCP Server's use of quarkus-oidc as you indicate above and needing to add the client side as well? I have included the quarkus-oidc-client in the pom file so I expected it to work.

[lmccay]

I've gotten further by changing the grant.type to "quarkus.oidc-client=client" - didn't realize at first that you were saying that. Thank you!

[sberyozkin]

@lmccay Sure, makes sense. Indeed, you can combine oidc-client and oidc extensions as they serve different roles

[jacobhm98]

From here:
"MCP servers MUST implement the OAuth 2.0 Protected Resource Metadata (RFC9728) specification to indicate the locations of authorization servers. The Protected Resource Metadata document returned by the MCP server MUST include the authorization_servers field containing at least one authorization server."

Is it correct that this .well-known/oauth-protected-resource endpoint is not implemented automatically by the quarkus-oidc SDK? Is there a recommended way to accomplish this? Or should I just manually create a .well-known/oauth-protected-resource endpoint in my MCP server?

[sberyozkin]

@jacobhm98

Is it correct that this .well-known/oauth-protected-resource endpoint is not implemented automatically by the quarkus-oidc SDK?

We've implemented it for Quarkus 3.25: #48734, 3.25 CR1 will be released shortly.

FYI, it is only relevant if you are using an MCP client that has implemented the latest stable MCP authorization spec and which insists on the MCP server providing authorization_servers metadata. Also even though this is a must there, I'm pretty sure a lot of MCP clients will allow to configure themselves directly...

If really needed (for ex, you will not be able to move to Quarkus 3.25 in the short term), you can easily create a similar handler by copying and pasting that code, but indeed, if the MCP client is not enforcing it then it should not be necessary

[jacobhm98]

Great! Im building an MCP server with quarkus that will definitely need this right now, still in dev mode so we can probably wait for 3.25. When do you guess this will be released?

[sberyozkin]

@jacobhm98 Sounds good, 3.25.CR1 is scheduled for tomorrow: https://github.com/quarkusio/quarkus/wiki/Release-Planning

[jacobhm98]

🥳