Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
mcp-security
Spring Security Configuration for MCP
96stars
18forks
Java
Quality signals
StaleNo testsNo CIThin docsNo licenseNew
AI summary
Auto-generated overview of what this skill does and when to reach for it.
Add OAuth 2.0 security to Spring AI MCP servers with minimal configuration for authentication and fine-grained access control.
Use this when
- You need to protect MCP servers with OAuth 2.0 tokens
- You want automatic security setup for MCP endpoints
- You need to restrict tool access based on user identity
- You're building MCP servers with Spring AI 2.0+
- You want to integrate with Spring Authorization Server
Don't use when
- You're using Spring AI 1.1.x (use version 0.0.6 instead)
- You need non-JWT authentication methods (e.g., basic auth)
- Your MCP server isn't built with Spring WebMVC
Capabilities
- Auto-configures OAuth 2.0 security for MCP servers
- Supports JWT validation from any OAuth 2.0 issuer
- Provides fine-grained access control for MCP tools
- Includes Spring Boot starter for zero-config setup
- Supports API key authentication as fallback
- Enables session binding to user identity
InstallMCPInstall as a Claude Code skill
Universal installANY TOOL
$ npx skillcity@latest spring-ai-community/mcp-securityAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
# Install into ~/.claude/skills/ mkdir -p ~/.claude/skills/mcp-security curl -fsSL https://raw.githubusercontent.com/spring-ai-community/mcp-security/main/README.md -o ~/.claude/skills/mcp-security/SKILL.md
Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
mcp-security — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt