https://blog.abhipraya.dev/tags/oauth/Recent content in Oauth on Daffa AbhiprayaHugoen-us© Daffa AbhiprayaMon, 19 Oct 2026 00:00:00 +0700https://blog.abhipraya.dev/posts/private-mcp-server-mcphub-cloudflare-access/Mon, 19 Oct 2026 00:00:00 +0700https://blog.abhipraya.dev/posts/private-mcp-server-mcphub-cloudflare-access/<p>An MCP server is a URL that lets an AI client call tools on your behalf. For tools that are only for you, or for you and a few friends, that URL should be private: the right people get in with a login, and everyone else gets turned away before they reach a single tool.</p> <p>This post builds that on one small server. <a href="https://github.com/samanhappy/mcphub">MCPHub</a> sits in front of your MCP servers and decides which tools exist at which URL. Cloudflare Access sits in front of MCPHub and decides which people can open that URL, using an allowlist of email addresses. You write no authentication code. At the end there is one more step that is easy to skip and matters a lot: making sure nobody can walk around Cloudflare.</p>