Overview
Practical, task-focused guides for operating and integrating with eetr-auth.
Task-focused walkthroughs for the things people actually set up.
MCP server with DCR
Let MCP clients (Claude, ChatGPT) self-register as public, PKCE-only clients via RFC 7591 Dynamic Client Registration, with resource-indicator audience binding.
WAF & rate limiting
Put the token, auth, and registration endpoints behind Cloudflare's WAF and rate-limiting rules as defense-in-depth.
MFA & TOTP
Enable site-wide email OTP and let users enroll authenticator apps (RFC 6238 TOTP).
SPA / public client
Integrate a browser single-page app using a public client and PKCE.
OIDC compliance
The OpenID Connect and OAuth specifications eetr-auth implements, its discovery metadata, endpoints, and supported claims.
Set up an MCP server with DCR
Let MCP clients like Claude and ChatGPT connect to your protected resource by self-registering as public, PKCE-only OAuth clients via RFC 7591 Dynamic Client Registration.