Hacker News new | ask | show | jobs
by sbaluja1027 558 days ago
Something that I don’t get about MCP servers is how will this work in Production when the MCP server is used by many clients. It does not have auth built in. Does this mean that users will have to host their own MCP Servers locally? It’s just not very practical.

I know it’s not related to your Go SDK, it’s just something that I have been wondering.
1 comments
cbatt 558 days ago
Yeah auth is not part of the MCP spec at the moment. This thread has the current state of the world though: https://github.com/modelcontextprotocol/specification/discus...

And there's a concrete PR open at https://github.com/modelcontextprotocol/specification/pull/1... which suggests that there will be an auth capability with both oauth and credential (api keys etc) which seems like it will make it's way into the next release of the spec

link