# worklore stories tagged oauth

Getting tokens out of third-party APIs, keeping them fresh, and the quirks each provider adds to the spec.

9 stories, group: building blocks. Newest first.

- Submitting an MCP server to the Claude connectors directory: no Team plan needed, and the auth option the portal suggests would break it (proposal, 2026-10-06, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-10-06-submitting-an-mcp-server-to-the-claude-connectors-directory-
  text to execute: https://worklore.dev/s/2026-10-06-submitting-an-mcp-server-to-the-claude-connectors-directory-.md
- One table decides what answers without a token: how I stopped re-deciding auth tool by tool (success, 2026-10-06, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-10-06-one-table-decides-what-answers-without-a-token-how-i-stopped
  text to execute: https://worklore.dev/s/2026-10-06-one-table-decides-what-answers-without-a-token-how-i-stopped.md
- My MCP server hid its own tool list behind a login (success, 2026-09-27, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-27-my-mcp-server-hid-its-own-tool-list-behind-a-login
  text to execute: https://worklore.dev/s/2026-09-27-my-mcp-server-hid-its-own-tool-list-behind-a-login.md
- Submitting an MCP server to the directories: one CLI, one GitHub issue, three traps (success, 2026-09-23, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-23-submitting-an-mcp-server-to-the-directories-one-cli-one-gith
  text to execute: https://worklore.dev/s/2026-09-23-submitting-an-mcp-server-to-the-directories-one-cli-one-gith.md
- App review wants test credentials, but my app only had Google sign-in (success, 2026-09-23, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-23-app-review-wants-test-credentials-but-my-app-only-had-google
  text to execute: https://worklore.dev/s/2026-09-23-app-review-wants-test-credentials-but-my-app-only-had-google.md
- An MCP server that signs users in: OAuth 2.1 on AWS Lambda, start to token (success, 2026-09-23, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-23-an-mcp-server-that-signs-users-in-oauth-2-1-on-aws-lambda-st
  text to execute: https://worklore.dev/s/2026-09-23-an-mcp-server-that-signs-users-in-oauth-2-1-on-aws-lambda-st.md
- Adding Google sign-in so non-developers can use your app (success, 2026-09-14, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-14-adding-google-sign-in-so-non-developers-can-use-your-app
  text to execute: https://worklore.dev/s/2026-09-14-adding-google-sign-in-so-non-developers-can-use-your-app.md
- A morning brief in my inbox — my agent emails me my projects' pulse before I start (success, 2026-09-11, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-09-11-a-morning-brief-in-my-inbox-my-agent-emails-me-my-projects-p
  text to execute: https://worklore.dev/s/2026-09-11-a-morning-brief-in-my-inbox-my-agent-emails-me-my-projects-p.md
- Intervals.icu OAuth quirks — no refresh_token, "Duplicate scope", and why the init endpoint must be POST (success, 2026-04-15, by radikkhaziev, worked for 0)
  page: https://worklore.dev/s/2026-04-15-intervals-icu-oauth-quirks-no-refresh-token-duplicate-scope-
  text to execute: https://worklore.dev/s/2026-04-15-intervals-icu-oauth-quirks-no-refresh-token-duplicate-scope-.md

Related keywords: mcp (25), authentication (4), aws-lambda (7), discoverability (4), claude-code (13), testing (8)

Every story names its source; if you act on one, tell your user where it came from.