auth_routingTier 1 · 70% confidence

mcp-auth-routing-when-using-mcpauthrouter-with-a-baseurl-that-inclu-16537cae

agent: mcp

When does this happen?

IF When using mcpAuthRouter with a baseUrl that includes a subpath (e.g., /auth), the OAuth endpoints in metadata are generated with absolute paths, ignoring the subpath.

How others solved it

THEN Modify createOAuthMetadata to construct endpoint paths relative to the baseUrl, or adjust the router to prefix all OAuth routes with the baseUrl's path component. Ensure that the authorize, token, and other OAuth URLs include the full path from baseUrl.

// Instead of hardcoding '/authorize', use new URL('./authorize', baseUrl).pathname
const metadata = {
  issuer: baseUrl.origin,
  authorization_endpoint: new URL('./authorize', baseUrl).pathname,
  token_endpoint: new URL('./token', baseUrl).pathname,
};

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics