# cloudflare/workers-oauth-provider

OAuth provider library for Cloudflare Workers

Repository: https://github.com/cloudflare/workers-oauth-provider
Canonical: https://ross.abutalabs.com/products/workers-oauth-provider
Language: TypeScript
License: MIT
License Family: permissive
Last push: 2026-08-19T15:28:40+00:00

## Health v2 (maintenance only)
Score: 86/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 98, release rhythm 97, longevity 38
- inputs: {"age_days": 540, "days_push": 14, "days_rel": 23, "gap_med": 7, "n_releases_24m": 32}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1864, forks 134 (observed 2026-08-28T04:05:46.122534+00:00)

## What it is
An OAuth 2.1 provider library for Cloudflare Workers that adds authorization-server capabilities to HTTP APIs and remote MCP servers. It handles OAuth request parsing, client validation, PKCE, and token flows while delegating user authentication and consent to the developer.

## Use cases
- add OAuth 2.1 authorization to an API on Cloudflare Workers
- secure a remote MCP server with OAuth
- build an authorization server with PKCE support
- issue access tokens for a Workers-hosted API
- implement OAuth consent flow for a serverless app

## When to choose
- your API or MCP server runs on Cloudflare Workers and needs OAuth 2.1
- you want a lightweight, embeddable OAuth provider rather than a standalone identity product
- you need MCP-compatible authorization for AI agent clients

## When to avoid
- you need a full identity provider with user management, SSO, or hosted login pages
- your backend is not on Cloudflare Workers
- you need OIDC features beyond the OAuth 2.1 core flows

## Facets
- artifact type: library
- maturity: active
- function: auth, middleware, http-server, mcp
- domain: security, web-development, backend, apis
- platform: serverless
- tags: oauth2, oauth-2.1, cloudflare-workers, authorization-server, pkce, mcp-servers, kv-storage, ai-agents, cloudflare, typescript, nodejs

## Member repositories
- cloudflare/workers-oauth-provider (main) score 86

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:46.122534+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:15:36.259647+00:00, confidence not recorded.
  - readme: https://github.com/cloudflare/workers-oauth-provider (fetched 2026-08-28T04:05:46.122534+00:00, sha b5f29831951b)
- Data as of 2026-08-30T08:39:29.467469+00:00.