> ## Documentation Index

> Fetch the complete documentation index at: /llms.txt

> Use this file to discover all available pages before exploring further.

Skip to main content
Auth

# Descope 🤝 FastMCP

Secure your FastMCP server with Descope

New in version `2.12.4` This guide shows you how to secure your FastMCP server using Descope, a complete authentication and user management solution. This integration uses the Remote OAuth pattern, where Descope handles user login and your FastMCP server validates the tokens.

##
​
Configuration

###
​
Prerequisites

Before you begin, you will need:

1. To sign up for a Free Forever Descope account
2. Your FastMCP server’s URL (can be localhost for development, e.g., `http://localhost:3000`)

###
​
Step 1: Configure Descope

1

Create an MCP Server

1. Go to the MCP Servers page of the Descope Console, and create a new MCP Server.
2. Give the MCP server a name and description.
3. Ensure that Dynamic Client Registration (DCR) is enabled. Then click Create.
4. Once you’ve created the MCP Server, note your Well-Known URL.

DCR is required for FastMCP clients to automatically register with your authentication server.
2

Note Your Well-Known URL

Save your Well-Known URL from MCP Server Settings:

    Well-Known URL: https://.../v1/apps/agentic/P.../M.../.well-known/openid-configuration

###
​
Step 2: Environment Setup

Create a `.env` file with your Descope configuration:

    DESCOPE_CONFIG_URL=https://.../v1/apps/agentic/P.../M.../.well-known/openid-configuration     # Your Descope Well-Known URL
    SERVER_URL=http://localhost:3000     # Your server's base URL

###
​
Step 3: FastMCP Configuration

Create your FastMCP server file and use the DescopeProvider to handle all the OAuth integration automatically:
server.py

    from fastmcp import FastMCP
    from fastmcp.server.auth.providers.descope import DescopeProvider

    # The DescopeProvider automatically discovers Descope endpoints
    # and configures JWT token validation
    auth_provider = DescopeProvider(
        config_url="https://.../.well-known/openid-configuration",  # Your MCP Server .well-known URL
        base_url=SERVER_URL,                                        # Your server's public URL
    )

    # Create FastMCP server with auth
    mcp = FastMCP(name="My Descope Protected Server", auth=auth_provider)

##
​
Testing

To test your server, you can use the `fastmcp` CLI to run it locally. Assuming you’ve saved the above code to `server.py` (after replacing the environment variables with your actual values!), you can run the following command:

    fastmcp run server.py --transport http --port 8000

Now, you can use a FastMCP client to test that you can reach your server after authenticating:

    from fastmcp import Client
    import asyncio

    async def main():
        async with Client("http://localhost:8000/mcp", auth="oauth") as client:
            assert await client.ping()

    if __name__ == "__main__":
        asyncio.run(main())

##
​
Production Configuration

For production deployments, load configuration from environment variables:
server.py

    import os
    from fastmcp import FastMCP
    from fastmcp.server.auth.providers.descope import DescopeProvider

    # Load configuration from environment variables
    auth = DescopeProvider(
        config_url=os.environ.get("DESCOPE_CONFIG_URL"),
        base_url=os.environ.get("BASE_URL", "https://your-server.com")
    )

    mcp = FastMCP(name="My Descope Protected Server", auth=auth)

Azure (Microsoft Entra ID) OAuth 🤝 FastMCP
Previous
Discord OAuth 🤝 FastMCP
Next
Ctrl+I
Assistant
Responses are generated using AI and may contain mistakes.
\n\n
\n
\n \n
\n
","contacts":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","dashboard":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","data-table":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","hitchhikers":" \n
\n\n Prefab Showcase\n \n \n \n \n\n
\n
\n \n
\n
","pie-chart":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","reactive":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","team-directory-reactive":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
","team-directory":" \n
\n\n Prefab\n \n \n \n \n\n
\n
\n \n
\n
"};