URL: https://gofastmcp.com/cli/auth
Title: Auth Utilities - FastMCP

Documentation Index
Fetch the complete documentation index at:
/llms.txt
Use this file to discover all available pages before exploring further.
Skip to main content
Meet
Prefect Horizon
, the enterprise MCP gateway built by the team behind FastMCP
FastMCP
home page
v3
Prefect Horizon
PrefectHQ/fastmcp
25,596
PrefectHQ/fastmcp
25,596
Search...
Navigation
CLI
Auth Utilities
Search the docs...
Ctrl
K
Documentation
Get Started
Welcome!
Installation
Quickstart
Servers
Overview
Core Components
Working with Tools
MCP Providers
Interactivity
Extensibility
Auth
Deployment
Apps
Overview
Quickstart
NEW
FastMCPApp
NEW
Interactive Tools
NEW
Generative UI
NEW
Custom HTML
Reference
Clients
Overview
Client-Only Package
Transports
fastmcp-remote
Operations
UPDATED
Authentication
UPDATED
Integrations
Auth
Web Frameworks
AI Assistants
AI SDKs
MCP.json
More
Settings
CLI
Overview
Running
Install MCPs
Inspecting
Client
Generate CLI
Auth
Upgrading
Development
What's New
FAQ
On this page
Creating a CIMD
Options
Example
Validating a CIMD
CLI
Auth Utilities
Copy page
Create and validate CIMD documents for OAuth
Copy page
New in version
3.0.0
The
fastmcp auth
commands help with CIMD (Client ID Metadata Document) management — part of MCP’s OAuth authentication flow. A CIMD is a JSON document you host at an HTTPS URL to identify your client application to MCP servers.
​
Creating a CIMD
fastmcp auth cimd create
generates a CIMD document:
fastmcp
auth
cimd
create
\
--name
"
My App
"
\
--redirect-uri
"
http://localhost:*/callback
"
{
"
client_id
"
:
"
https://your-domain.com/oauth/client.json
"
,
"
client_name
"
:
"
My App
"
,
"
redirect_uris
"
:
[
"
http://localhost:*/callback
"
],
"
token_endpoint_auth_method
"
:
"
none
"
}
The generated document includes a placeholder
client_id
— update it to match the URL where you’ll host the document before deploying.
​
Options
Option
Flag
Description
Name
--name
Required.
Human-readable client name
Redirect URI
--redirect-uri
Required.
Allowed redirect URIs (repeatable)
Client URI
--client-uri
Client’s home page URL
Logo URI
--logo-uri
Client’s logo URL
Scope
--scope
Space-separated list of scopes
Output
--output
,
-o
Save to file (default: stdout)
Pretty
--pretty
Pretty-print JSON (default: true)
​
Example
fastmcp
auth
cimd
create
\
--name
"
My Production App
"
\
--redirect-uri
"
http://localhost:*/callback
"
\
--redirect-uri
"
https://myapp.example.com/callback
"
\
--client-uri
"
https://myapp.example.com
"
\
--scope
"
read write
"
\
--output
client.json
​
Validating a CIMD
fastmcp auth cimd validate
fetches a hosted CIMD and verifies it conforms to the spec:
fastmcp
auth
cimd
validate
https://myapp.example.com/oauth/client.json
The validator checks that the URL is valid (HTTPS, non-root path), the document is valid JSON, the
client_id
matches the URL, and no shared-secret auth methods are used.
On success:
→ Fetching https://myapp.example.com/oauth/client.json...
✓ Valid CIMD document
Document details:
client_id: https://myapp.example.com/oauth/client.json
client_name: My App
token_endpoint_auth_method: none
redirect_uris:
• http://localhost:*/callback
Option
Flag
Description
Timeout
--timeout
,
-t
HTTP request timeout in seconds (default: 10)
Generate CLI
Previous
Upgrading from FastMCP 2
Next
Ctrl
+I
discord
github
website
x
Powered by
This documentation is built and hosted on Mintlify, a developer documentation platform
Assistant
Responses are generated using AI and may contain mistakes.
\n\n
\n
\n \n
\n
