OAuth-аутентификация для удалённых MCP-серверов

★ 7.1 · ai-tooling

mcp-oauth-remote-gateway is a Claude Code skill that performs the OAuth dance manually for remote MCP servers running on headless Hermes gateways, bypassing the built-in flow that fails in containerized and remote deployments. Hermes' native OAuth client binds a redirect_uri to 127.0.0.1 and waits for the authorization code on a local port — which works on the user's own machine but silently breaks on containers, VPS, or Docker hosts where the browser callback resolves to the user's laptop, not the remote process. This skill implements OAuth 2.1 with PKCE and RFC 7591 Dynamic Client Registration by hand, writing the resulting tokens directly into Hermes' token storage so a subsequent /reload-mcp finds cached credentials and skips the browser flow entirely. It applies to MCP servers that support DCR — such as Better Stack, Linear, Cloudflare, and Datadog — and is not intended for GitHub (no DCR endpoint), static Bearer tokens, or local CLI installations of Hermes. The skill also documents escalation order: checking for a Hermes dashboard web UI before resorting to manual token surgery.