Edit this page on GitHub

MCP Client Quickstart

NOCFoundry exposes the Model Context Protocol at:

http://127.0.0.1:5000/mcp

With the protected validation example, /mcp is protected by OIDC endpoint auth.

What clients need

  • the MCP endpoint URL
  • an access token whose aud matches the configured /mcp audience
  • support for bearer tokens on HTTP-based MCP transports

The protected resource metadata is served from:

/.well-known/oauth-protected-resource/mcp

Minimal connection model

  1. Start NOCFoundry with examples/tools-configs/keycloak-protected-validation.yaml and examples/server-configs/protected-api-mcp-ui.yaml.
  2. Obtain an access token from Keycloak.
  3. Configure your MCP client to connect to http://127.0.0.1:5000/mcp.
  4. Supply Authorization: Bearer <token> on every HTTP request.

Audience reminder

The access token must match the /mcp audience configured in:

By default that is:

http://127.0.0.1:5000/mcp