Version: 0.8.0

MCP + OAuth Proxy API

Streamable HTTP MCP server with an OAuth 2.0 proxy that bridges CIMD-based MCP clients to a Cognito user pool.

Authentication flow:

1. Client POSTs to /v1/mcp → receives 401 with WWW-Authenticate: Bearer resource_metadata="<url>"
2. Client fetches /.well-known/oauth-protected-resource → discovers authorization server
3. Client fetches /.well-known/oauth-authorization-server → discovers OAuth endpoints
4. Client performs Authorization Code + PKCE flow via /oauth2/*
5. Client retries MCP requests with the Bearer token

Authentication

HTTP: Bearer Auth

Cognito access or ID token obtained via the OAuth proxy

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer