Hacker News Reader

Something that I don’t get about MCP servers is how will this work in Production when the MCP server is used by many clients. It does not have auth built in. Does this mean that users will have to host their own MCP Servers locally? It’s just not very practical.

I know it’s not related to your Go SDK, it’s just something that I have been wondering.

View on HN

Yeah auth is not part of the MCP spec at the moment. This thread has the current state of the world though: https://github.com/modelcontextprotocol/specification/discus...

And there's a concrete PR open at https://github.com/modelcontextprotocol/specification/pull/1... which suggests that there will be an auth capability with both oauth and credential (api keys etc) which seems like it will make it's way into the next release of the spec

Reply on news.ycombinator.com