Is it possible to use OAuth Tools in AIChatAgent?

[ataylorme]

I am using AIChatAgent (with hono-agents) and would like to add authentication/authorization to tools as outlined in this doc. That doc links to a GitHub example that creates a remote MCP server with McpAgent

Is it possible to either 1) add OAuth to tools in AIChatAgent directly or 2) create a separate MCP server that has OAuth tools and register it with AIChatAgent?

[deathbyknowledge]

Hello @ataylorme, both options should be doable.

Re: 1)
If you want to have the your OAuth McpAgent in the same Worker you use your Agents you will need to update the default entrypoint to use workers-oauth-provider.
You can still expose authless routes in your default handler (your current Worker's fetch so you can handle your Agents as you were doing now). You'll also need to include the OAuth /authorize handling.

Then, you can include the McpAgent.serve(...) in the apiHandlers, which is for OAuth authorized routes.

This comment goes over the entire Request -> OAuth -> McpAgent flow. It includes an example of how to gate tools behind arbitrary flags you set in your ctx.props, which you could replace with OAuth props you might want to use for that.

Then, 2) is exactly the same but you can deploy the OAuth McpAgent in a new worker directly and avoid updating your current Worker.

[whoiskatrin]

@ataylorme let us know if there is anything else we can help you with :)

[ataylorme]

@whoiskatrin I was able to get remote-mcp-github-oauth integrated with AIChatAgent on the server/API side. I have not been able to get the React client to initiate the OAuth flow. Any examples or guidance there would be appreciated.

[whoiskatrin]

should be fixed in this PR: #495