---
schema: rendered-html/v1
title: "Auth Utilities - FastMCP"
source_url: https://gofastmcp.com/cli/auth
generated_at: 2026-06-11T19:40:06.724523+00:00
---




[FastMCP home page![light logo](images/gofastmcp__com__cli__auth__wordmark.avif)![dark logo](images/gofastmcp__com__cli__auth__wordmark-white.avif)](gofastmcp__com.md)







CLI

Auth Utilities





















  - [Overview](gofastmcp__com__cli__overview.md)
  - [Running](gofastmcp__com__cli__running.md)
  - [Install MCPs](gofastmcp__com__cli__install-mcp.md)
  - [Inspecting](gofastmcp__com__cli__inspecting.md)
  - [Client](gofastmcp__com__cli__client.md)
  - [Generate CLI](gofastmcp__com__cli__generate-cli.md)
  - [Auth](/cli/auth)


- [Creating a CIMD](#creating-a-cimd)
  - [Options](#options)
  - [Example](#example)
- [Validating a CIMD](#validating-a-cimd)

CLI

# Auth Utilities


Create and validate CIMD documents for OAuth


The `fastmcp auth` commands help with CIMD (Client ID Metadata Document) management — part of MCP’s OAuth authentication flow. A CIMD is a JSON document you host at an HTTPS URL to identify your client application to MCP servers.

## [​](#creating-a-cimd) Creating a CIMD

`fastmcp auth cimd create` generates a CIMD document:

fastmcp auth cimd create \
  --name "My App" \
  --redirect-uri "http://localhost:*/callback"

  "client_id": "https://your-domain.com/oauth/client.json",
  "client_name": "My App",
  "redirect_uris": ["http://localhost:*/callback"],
  "token_endpoint_auth_method": "none"

The generated document includes a placeholder `client_id` — update it to match the URL where you’ll host the document before deploying.

### [​](#options) Options

| Option | Flag | Description |
| --- | --- | --- |
| Name | `--name` | **Required.** Human-readable client name |
| Redirect URI | `--redirect-uri` | **Required.** Allowed redirect URIs (repeatable) |
| Client URI | `--client-uri` | Client’s home page URL |
| Logo URI | `--logo-uri` | Client’s logo URL |
| Scope | `--scope` | Space-separated list of scopes |
| Output | `--output`, `-o` | Save to file (default: stdout) |
| Pretty | `--pretty` | Pretty-print JSON (default: true) |

### [​](#example) Example

fastmcp auth cimd create \
  --name "My Production App" \
  --redirect-uri "http://localhost:*/callback" \
  --redirect-uri "https://myapp.example.com/callback" \
  --client-uri "https://myapp.example.com" \
  --scope "read write" \
  --output client.json

## [​](#validating-a-cimd) Validating a CIMD

`fastmcp auth cimd validate` fetches a hosted CIMD and verifies it conforms to the spec:

fastmcp auth cimd validate https://myapp.example.com/oauth/client.json

The validator checks that the URL is valid (HTTPS, non-root path), the document is valid JSON, the `client_id` matches the URL, and no shared-secret auth methods are used.
On success:

→ Fetching https://myapp.example.com/oauth/client.json...
✓ Valid CIMD document

Document details:
  client_id: https://myapp.example.com/oauth/client.json
  client_name: My App
  token_endpoint_auth_method: none
  redirect_uris:
    • http://localhost:*/callback

| Option | Flag | Description |
| --- | --- | --- |
| Timeout | `--timeout`, `-t` | HTTP request timeout in seconds (default: 10) |

[Generate CLI

Previous](gofastmcp__com__cli__generate-cli.md)[Upgrading from FastMCP 2

Next](gofastmcp__com__getting-started__upgrading__from-fastmcp-2.md)






