oauth

This package provides tools to manage multiple OAuth accounts within MCP servers, enabling consistent account lifecycle handling across providers like Google and Microsoft. It supports two authentication modes: loopback (multi-account) offering tools like account-switch, account-remove, and account-list; and stateless mode (DCR/bearer) limited to account-me. Token storage is configurable via backends such as keyv-duckdb or keyv-file. Initialization creates a .tokens/ directory and config file. Includes logging sanitization to prevent secret leaks. Requires Node.js >= 22. API documentation available at https://mcp-z.github.io/oauth.