Spaces:
Running
Running
Jeremiah Lowin
Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327)
3959209 unverified | --- | |
| title: Anthropic API 🤝 FastMCP | |
| sidebarTitle: Anthropic API | |
| description: Call FastMCP servers from the Anthropic API | |
| icon: message-code | |
| --- | |
| import { VersionBadge } from "/snippets/version-badge.mdx" | |
| Anthropic's [Messages API](https://docs.anthropic.com/en/api/messages) supports MCP servers as remote tool sources. This tutorial will show you how to create a FastMCP server and deploy it to a public URL, then how to call it from the Messages API. | |
| <Tip> | |
| Currently, the MCP connector only accesses **tools** from MCP servers—it queries the `list_tools` endpoint and exposes those functions to Claude. Other MCP features like resources and prompts are not currently supported. You can read more about the MCP connector in the [Anthropic documentation](https://docs.anthropic.com/en/docs/agents-and-tools/mcp-connector). | |
| </Tip> | |
| ## Create a Server | |
| First, create a FastMCP server with the tools you want to expose. For this example, we'll create a server with a single tool that rolls dice. | |
| ```python server.py | |
| import random | |
| from fastmcp import FastMCP | |
| mcp = FastMCP(name="Dice Roller") | |
| @mcp.tool | |
| def roll_dice(n_dice: int) -> list[int]: | |
| """Roll `n_dice` 6-sided dice and return the results.""" | |
| return [random.randint(1, 6) for _ in range(n_dice)] | |
| if __name__ == "__main__": | |
| mcp.run(transport="http", port=8000) | |
| ``` | |
| ## Deploy the Server | |
| Your server must be deployed to a public URL in order for Anthropic to access it. The MCP connector supports both SSE and Streamable HTTP transports. | |
| For development, you can use tools like `ngrok` to temporarily expose a locally-running server to the internet. We'll do that for this example (you may need to install `ngrok` and create a free account), but you can use any other method to deploy your server. | |
| Assuming you saved the above code as `server.py`, you can run the following two commands in two separate terminals to deploy your server and expose it to the internet: | |
| <CodeGroup> | |
| ```bash FastMCP server | |
| python server.py | |
| ``` | |
| ```bash ngrok | |
| ngrok http 8000 | |
| ``` | |
| </CodeGroup> | |
| <Warning> | |
| This exposes your unauthenticated server to the internet. Only run this command in a safe environment if you understand the risks. | |
| </Warning> | |
| ## Call the Server | |
| To use the Messages API with MCP servers, you'll need to install the Anthropic Python SDK (not included with FastMCP): | |
| ```bash | |
| pip install anthropic | |
| ``` | |
| You'll also need to authenticate with Anthropic. You can do this by setting the `ANTHROPIC_API_KEY` environment variable. Consult the Anthropic SDK documentation for more information. | |
| ```bash | |
| export ANTHROPIC_API_KEY="your-api-key" | |
| ``` | |
| Here is an example of how to call your server from Python. Note that you'll need to replace `https://your-server-url.com` with the actual URL of your server. In addition, we use `/mcp/` as the endpoint because we deployed a streamable-HTTP server with the default path; you may need to use a different endpoint if you customized your server's deployment. **At this time you must also include the `extra_headers` parameter with the `anthropic-beta` header.** | |
| ```python {5, 13-22} | |
| import anthropic | |
| from rich import print | |
| # Your server URL (replace with your actual URL) | |
| url = 'https://your-server-url.com' | |
| client = anthropic.Anthropic() | |
| response = client.beta.messages.create( | |
| model="claude-sonnet-4-20250514", | |
| max_tokens=1000, | |
| messages=[{"role": "user", "content": "Roll a few dice!"}], | |
| mcp_servers=[ | |
| { | |
| "type": "url", | |
| "url": f"{url}/mcp/", | |
| "name": "dice-server", | |
| } | |
| ], | |
| extra_headers={ | |
| "anthropic-beta": "mcp-client-2025-04-04" | |
| } | |
| ) | |
| print(response.content) | |
| ``` | |
| If you run this code, you'll see something like the following output: | |
| ```text | |
| I'll roll some dice for you! Let me use the dice rolling tool. | |
| I rolled 3 dice and got: 4, 2, 6 | |
| The results were 4, 2, and 6. Would you like me to roll again or roll a different number of dice? | |
| ``` | |
| ## Authentication | |
| <VersionBadge version="2.6.0" /> | |
| The MCP connector supports OAuth authentication through authorization tokens, which means you can secure your server while still allowing Anthropic to access it. | |
| ### Server Authentication | |
| The simplest way to add authentication to the server is to use a bearer token scheme. | |
| For this example, we'll quickly generate our own tokens with FastMCP's `RSAKeyPair` utility, but this may not be appropriate for production use. For more details, see the complete server-side [Token Verification](/servers/auth/token-verification) documentation. | |
| We'll start by creating an RSA key pair to sign and verify tokens. | |
| ```python | |
| from fastmcp.server.auth.providers.jwt import RSAKeyPair | |
| key_pair = RSAKeyPair.generate() | |
| access_token = key_pair.create_token(audience="dice-server") | |
| ``` | |
| <Warning> | |
| FastMCP's `RSAKeyPair` utility is for development and testing only. | |
| </Warning> | |
| Next, we'll create a `JWTVerifier` to authenticate the server. | |
| ```python | |
| from fastmcp import FastMCP | |
| from fastmcp.server.auth import JWTVerifier | |
| auth = JWTVerifier( | |
| public_key=key_pair.public_key, | |
| audience="dice-server", | |
| ) | |
| mcp = FastMCP(name="Dice Roller", auth=auth) | |
| ``` | |
| Here is a complete example that you can copy/paste. For simplicity and the purposes of this example only, it will print the token to the console. **Do NOT do this in production!** | |
| ```python server.py [expandable] | |
| from fastmcp import FastMCP | |
| from fastmcp.server.auth import JWTVerifier | |
| from fastmcp.server.auth.providers.jwt import RSAKeyPair | |
| import random | |
| key_pair = RSAKeyPair.generate() | |
| access_token = key_pair.create_token(audience="dice-server") | |
| auth = JWTVerifier( | |
| public_key=key_pair.public_key, | |
| audience="dice-server", | |
| ) | |
| mcp = FastMCP(name="Dice Roller", auth=auth) | |
| @mcp.tool | |
| def roll_dice(n_dice: int) -> list[int]: | |
| """Roll `n_dice` 6-sided dice and return the results.""" | |
| return [random.randint(1, 6) for _ in range(n_dice)] | |
| if __name__ == "__main__": | |
| print(f"\n---\n\n🔑 Dice Roller access token:\n\n{access_token}\n\n---\n") | |
| mcp.run(transport="http", port=8000) | |
| ``` | |
| ### Client Authentication | |
| If you try to call the authenticated server with the same Anthropic code we wrote earlier, you'll get an error indicating that the server rejected the request because it's not authenticated. | |
| ```python | |
| Error code: 400 - { | |
| "type": "error", | |
| "error": { | |
| "type": "invalid_request_error", | |
| "message": "MCP server 'dice-server' requires authentication. Please provide an authorization_token.", | |
| }, | |
| } | |
| ``` | |
| To authenticate the client, you can pass the token using the `authorization_token` parameter in your MCP server configuration: | |
| ```python {8, 21} | |
| import anthropic | |
| from rich import print | |
| # Your server URL (replace with your actual URL) | |
| url = 'https://your-server-url.com' | |
| # Your access token (replace with your actual token) | |
| access_token = 'your-access-token' | |
| client = anthropic.Anthropic() | |
| response = client.beta.messages.create( | |
| model="claude-sonnet-4-20250514", | |
| max_tokens=1000, | |
| messages=[{"role": "user", "content": "Roll a few dice!"}], | |
| mcp_servers=[ | |
| { | |
| "type": "url", | |
| "url": f"{url}/mcp/", | |
| "name": "dice-server", | |
| "authorization_token": access_token | |
| } | |
| ], | |
| extra_headers={ | |
| "anthropic-beta": "mcp-client-2025-04-04" | |
| } | |
| ) | |
| print(response.content) | |
| ``` | |
| You should now see the dice roll results in the output. | |