config-oauth.json

{
  "version": "v0.0.1-DEV_EDITION_EXPECT_CHANGES",
  "proxy": {
    "baseURL": "https://mcp-internal.yourcompany.org",
    "addr": ":8080", 
    "name": "MCP OAuth Proxy",
    "auth": {
      "kind": "oauth",
      "issuer": "https://mcp-internal.yourcompany.org",
      "gcpProject": {"$env": "GCP_PROJECT"},
      "idp": {
        "provider": "google",
        "clientId": {"$env": "GOOGLE_CLIENT_ID"},
        "clientSecret": {"$env": "GOOGLE_CLIENT_SECRET"},
        "redirectUri": "https://mcp-internal.yourcompany.org/oauth/callback"
      },
      "allowedDomains": ["yourcompany.com"],
      "allowedOrigins": ["https://claude.ai"],
      "allowedRedirectUriHosts": ["https://claude.ai"],
      "tokenTtl": "24h",
      "storage": "memory",
      "jwtSecret": {"$env": "JWT_SECRET"},
      "encryptionKey": {"$env": "ENCRYPTION_KEY"}
    }
  },
  "mcpServers": {
    "postgres": {
      "transportType": "stdio",
      "command": "docker",
      "args": [
        "run", "--rm", "-i", "--network", "host",
        "-e", "POSTGRES_HOST",
        "-e", "POSTGRES_PORT",
        "-e", "POSTGRES_DATABASE",
        "-e", "POSTGRES_USER",
        "-e", "POSTGRES_PASSWORD",
        "us-central1-docker.pkg.dev/database-toolbox/toolbox/toolbox:latest",
        "--stdio", "--prebuilt", "postgres"
      ],
      "env": {
        "POSTGRES_HOST": {"$env": "POSTGRES_HOST"},
        "POSTGRES_PORT": {"$env": "POSTGRES_PORT"},
        "POSTGRES_DATABASE": {"$env": "POSTGRES_DATABASE"},
        "POSTGRES_USER": {"$env": "POSTGRES_USER"},
        "POSTGRES_PASSWORD": {"$env": "POSTGRES_PASSWORD"}
      }
    },
    "notion": {
      "transportType": "stdio",
      "requiresUserToken": true,
      "userAuthentication": {
        "type": "manual",
        "displayName": "Notion Integration Token",
        "instructions": "Create an integration at https://www.notion.so/my-integrations and copy the token",
        "helpUrl": "https://developers.notion.com/docs/create-a-notion-integration"
      },
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "OPENAPI_MCP_HEADERS",
        "mcp/notion:latest"
      ],
      "env": {
        "OPENAPI_MCP_HEADERS": {"$userToken": "{\"Authorization\": \"Bearer {{token}}\"}"}
      }
    },
    "git": {
      "transportType": "stdio",
      "command": "docker",
      "args": [
        "run", "--rm", "-i", 
        "-v", "/repos:/repos:ro",
        "mcp/git:latest"
      ]
    },
    "stainless": {
      "transportType": "stdio",
      "command": "stainless",
      "args": ["mcp"],
      "requiresUserToken": true,
      "userAuthentication": {
        "type": "oauth",
        "displayName": "Stainless",
        "clientId": {"$env": "STAINLESS_OAUTH_CLIENT_ID"},
        "clientSecret": {"$env": "STAINLESS_OAUTH_CLIENT_SECRET"},
        "authorizationUrl": "https://api.stainless.com/oauth/authorize",
        "tokenUrl": "https://api.stainless.com/oauth/token",
        "scopes": ["mcp:read", "mcp:write"]
      },
      "env": {
        "STAINLESS_API_TOKEN": {"$userToken": "{{token}}"}
      }
    }
  }
}