URL: https://gofastmcp.com/integrations/descope
Title: Descope 🤝 FastMCP - FastMCP

Documentation Index
Fetch the complete documentation index at:
/llms.txt
Use this file to discover all available pages before exploring further.
Skip to main content
Meet
Prefect Horizon
, the enterprise MCP gateway built by the team behind FastMCP
FastMCP
home page
v3
Prefect Horizon
PrefectHQ/fastmcp
25,596
PrefectHQ/fastmcp
25,596
Search...
Navigation
Auth
Descope 🤝 FastMCP
Search the docs...
Ctrl
K
Documentation
Get Started
Welcome!
Installation
Quickstart
Servers
Overview
Core Components
Working with Tools
MCP Providers
Interactivity
Extensibility
Auth
Deployment
Apps
Overview
Quickstart
NEW
FastMCPApp
NEW
Interactive Tools
NEW
Generative UI
NEW
Custom HTML
Reference
Clients
Overview
Client-Only Package
Transports
fastmcp-remote
Operations
UPDATED
Authentication
UPDATED
Integrations
Auth
Auth0
AuthKit
AWS Cognito
Azure (Entra ID)
Descope
Discord
Eunomia Auth
GitHub
Google
Keycloak
NEW
Oracle
Permit.io
PropelAuth
Scalekit
Supabase
WorkOS
Web Frameworks
AI Assistants
AI SDKs
MCP.json
More
Settings
CLI
Upgrading
Development
What's New
FAQ
On this page
Configuration
Prerequisites
Step 1: Configure Descope
Step 2: Environment Setup
Step 3: FastMCP Configuration
Testing
Production Configuration
Auth
Descope 🤝 FastMCP
Copy page
Secure your FastMCP server with Descope
Copy page
New in version
2.12.4
This guide shows you how to secure your FastMCP server using
Descope
, a complete authentication and user management solution. This integration uses the
Remote OAuth
pattern, where Descope handles user login and your FastMCP server validates the tokens.
​
Configuration
​
Prerequisites
Before you begin, you will need:
To
sign up
for a Free Forever Descope account
Your FastMCP server’s URL (can be localhost for development, e.g.,
http://localhost:3000
)
​
Step 1: Configure Descope
1
Create an MCP Server
Go to the
MCP Servers page
of the Descope Console, and create a new MCP Server.
Give the MCP server a name and description.
Ensure that
Dynamic Client Registration (DCR)
is enabled. Then click
Create
.
Once you’ve created the MCP Server, note your Well-Known URL.
DCR is required for FastMCP clients to automatically register with your authentication server.
2
Note Your Well-Known URL
Save your Well-Known URL from
MCP Server Settings
:
Well-Known URL: https://.../v1/apps/agentic/P.../M.../.well-known/openid-configuration
​
Step 2: Environment Setup
Create a
.env
file with your Descope configuration:
DESCOPE_CONFIG_URL
=
https://.../v1/apps/agentic/P.../M.../.well-known/openid-configuration
# Your Descope Well-Known URL
SERVER_URL
=
http://localhost:3000
# Your server's base URL
​
Step 3: FastMCP Configuration
Create your FastMCP server file and use the DescopeProvider to handle all the OAuth integration automatically:
server.py
from
fastmcp
import
FastMCP
from
fastmcp
.
server
.
auth
.
providers
.
descope
import
DescopeProvider
# The DescopeProvider automatically discovers Descope endpoints
# and configures JWT token validation
auth_provider
=
DescopeProvider
(
config_url
=
"
https://.../.well-known/openid-configuration
"
,
# Your MCP Server .well-known URL
base_url
=
SERVER_URL
,
# Your server's public URL
)
# Create FastMCP server with auth
mcp
=
FastMCP
(
name
=
"
My Descope Protected Server
"
,
auth
=
auth_provider
)
​
Testing
To test your server, you can use the
fastmcp
CLI to run it locally. Assuming you’ve saved the above code to
server.py
(after replacing the environment variables with your actual values!), you can run the following command:
fastmcp
run
server.py
--transport
http
--port
8000
Now, you can use a FastMCP client to test that you can reach your server after authenticating:
from
fastmcp
import
Client
import
asyncio
async
def
main
():
async
with
Client
(
"
http://localhost:8000/mcp
"
,
auth
=
"
oauth
"
)
as
client
:
assert
await
client
.
ping
()
if
__name__
==
"
__main__
"
:
asyncio
.
run
(
main
())
​
Production Configuration
For production deployments, load configuration from environment variables:
server.py
import
os
from
fastmcp
import
FastMCP
from
fastmcp
.
server
.
auth
.
providers
.
descope
import
DescopeProvider
# Load configuration from environment variables
auth
=
DescopeProvider
(
config_url
=
os
.
environ
.
get
(
"
DESCOPE_CONFIG_URL
"
),
base_url
=
os
.
environ
.
get
(
"
BASE_URL
"
,
"
https://your-server.com
"
)
)
mcp
=
FastMCP
(
name
=
"
My Descope Protected Server
"
,
auth
=
auth
)
Azure (Microsoft Entra ID) OAuth 🤝 FastMCP
Previous
Discord OAuth 🤝 FastMCP
Next
Ctrl
+I
discord
github
website
x
Powered by
This documentation is built and hosted on Mintlify, a developer documentation platform
Assistant
Responses are generated using AI and may contain mistakes.
\n\n
\n
\n \n
\n
