You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- An Auth0 tenant (for OAuth and token verification)
24
+
- An Auth0 FGA account (OpenFGA / fga.dev) for authorization model and tuples
25
+
-`fga` CLI (optional, for bootstrapping the model and tuples)
7
26
8
27
## Available Tools
9
28
@@ -26,7 +45,6 @@ npm install
26
45
27
46
For detailed instructions on setting up your Auth0 tenant for MCP server integration, please refer to the [Auth0 Tenant Setup guide](https://github.com/auth0-samples/auth0-ai-samples/tree/main/auth-for-mcp/fastmcp-mcp-js/README.md#auth0-tenant-setup) in the FastMCP example.
28
47
29
-
30
48
## Auth0 FGA Setup
31
49
32
50
Auth0 FGA provides fine-grained authorization using [Relationship-Based Access Control (ReBAC)](https://docs.fga.dev/concepts#what-is-relationship-based-access-control-rebac). It's built on [OpenFGA](https://openfga.dev), a CNCF incubation project, and offers more flexible authorization patterns than traditional RBAC.
@@ -59,13 +77,6 @@ After creating your FGA credentials, export the following (provided during crede
59
77
60
78
### Authorization Model
61
79
62
-
This example uses an authorization model defined in [`fga/model.fga`](./fga/model.fga) that supports:
63
-
64
-
-**Public Tools**: Accessible to all authenticated users (e.g., `get_datetime`)
65
-
-**Role-Based Access**: Tools assigned to specific roles
66
-
-**Group Membership**: Users inherit permissions through group membership
67
-
-**Temporal Access**: Time-limited tool access with automatic expiration
0 commit comments