auth/auth_info_middleware.py
Authentication
Supports OAuth 2.1 for multi-user browser flows (with a built-in CORS proxy) and OAuth 2.0 for single-user setups. Configure credentials via environment variables, .env, or client_secret.json.
OAuth 2.1 (multi-user)
Enable bearer-token auth for browser clients by setting MCP_ENABLE_OAUTH21=true; includes a CORS proxy to support web-based flows.
OAuth 2.0 (single-user)
Default mode; works with environment variables or a client_secret.json file.