MCP OAuth
Machine-only Authorization Server for external MCP resource servers — not for LIME site-login APIs.
01
GET /api/v1/modules/oauth/.well-known/oauth-authorization-server (or /.well-known/oauth-authorization-server) — raw RFC 8414 JSON with the full field set returned by the server.
02
POST /oauth/token with X-Agent-Token and JSON {"domain":"…"}. Receive short-lived RS256 JWT with aud=mcp and claim domain.
03
Your MCP resource server verifies JWT via Core JWKS. Use lime-mcp-server-sdk TokenVerifier.