skills.rest
icyzh
icyzhCOMMUNITY
Explore all skills by this author →
Website𝕏@icyzhbeGitHub

mcp-oauth-remote-gateway

Facilitate manual OAuth 2.0 authentication for MCP servers on headless remote gateways.

1|Updated Jul 31, 2026
Search Tags:#authentication#oauth#mcp#gateway#pkce#remote-deployment
One-click install
npx skills add https://github.com/icyzh/hermes-web --skill mcp-oauth-remote-gateway-icyzh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mcp-oauth-remote-gateway
Source: https://github.com/icyzh/hermes-web/tree/main/optional-skills/mcp/mcp-oauth-remote-gateway
Command: npx skills add https://github.com/icyzh/hermes-web --skill mcp-oauth-remote-gateway-icyzh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill resolves the authentication failure that occurs when running MCP servers on remote gateways, where the standard browser-based OAuth callback cannot reach the local Hermes process.

Core Features & Use Cases

  • Manual OAuth Flow: Provides a step-by-step procedure to perform the OAuth dance and manually inject tokens into the Hermes storage system.
  • Diagnostic Tools: Includes a script to smoke-test tokens, verify refresh logic, and identify if a session has been revoked server-side.
  • Use Case: When deploying Hermes in a container or VPS, use this skill to authenticate MCP servers like Linear or Datadog without needing a local browser session on the gateway host.

Quick Start

Run the diagnose-oauth-mcp.py script with the server name to identify the correct recovery path for your OAuth session.

Frequently Asked Questions about mcp-oauth-remote-gateway

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate an MCP server on a headless remote gateway without a local browser?▼

To authenticate an MCP server on a headless remote gateway, you can use a manual OAuth flow to generate tokens and inject them directly into the Hermes storage system, bypassing the need for a local browser callback.

What is PKCE-based authorization and how does it secure remote MCP deployments?▼

PKCE-based authorization secures remote MCP deployments by requiring a dynamic proof key for token exchanges, ensuring persistent, scope-limited connectivity even when standard browser callbacks are unavailable.

How do I manually inject OAuth tokens into Hermes storage for a containerized MCP server?▼

You can manually inject OAuth tokens into Hermes storage by following a step-by-step procedure to complete the OAuth dance and securely insert the generated credentials for containerized MCP servers.

Does this manual OAuth flow support RFC 7591 dynamic client registration and RFC 8707 resource indicators?▼

Yes, the manual OAuth flow supports RFC 7591 dynamic client registration and RFC 8707 resource indicators to ensure persistent, scope-limited connectivity for remote MCP gateway environments.

Why does the standard browser-based OAuth callback fail when running MCP servers on remote VPS hosts?▼

The standard browser-based OAuth callback fails on remote VPS hosts because the callback cannot reach the local Hermes process in a headless environment, requiring a manual token injection approach.

How can I diagnose token refresh logic and verify if an MCP OAuth session has been revoked?▼

You can diagnose token refresh logic and verify revoked MCP OAuth sessions by running the included diagnostic script to smoke-test tokens and identify server-side revocation status.

Related Skills

Explore More Software Engineering Skills→
paarths-collabpaarths-collab
13

integration-railway

Connect Railway to a self-hosted Hermes agent over SSH with rollback-safe validation.

Community
Advanced
JunjieChen0JunjieChen0
4

skill-smoke-test

Verify Skill discovery and SKILL.md loading via smoke test.

Community
Basic
vellum-aivellum-ai
1.0k

mcp-setup

Configure MCP servers for adding, authenticating, listing, and removing external tools.

Official
Intermediate
benjaminshoemakerbenjaminshoemaker
39

oauth-login

Automate OAuth login for Google and GitHub with local callback and token storage.

Community
Advanced