MCP App example demonstrating lazy (on-demand) OAuth: public tools work unauthenticated, protected tools return 401 + WWW-Authenticate so the host runs the OAuth flow only when needed
| Tool name | Description | Destructive? |
|---|---|---|
| list_pdfs | ✓ no |
{
"mcpServers": {
"modelcontextprotocolserver-lazy-auth": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-lazy-auth"
]
}
}
}