OAuth Proxy Unlocks MCP Authentication with Authentik

I’ve been building an MCP server for a client that connects various tools for querying our DuckDB-based warehouse (managed with dbt). The authentication piece had me stuck for way too long - but I finally cracked it! The Problem We’re running Authentik as our OAuth 2.0 provider. It’s solid and OAuth 2.0 compliant, but here’s the catch: it doesn’t support Dynamic Client Registration (DCR). Meanwhile, MCP clients expect DCR-based OAuth flows. ...

September 2, 2025 · 2 min · 218 words