GitHub Remote MCP in Librechat using Oauth2.1 / GitHub App

[mrh-chain]

Trying to get the GitHub Remote MCP server running in the latest version (as of writing this) of LibreChat. I see in GitHub's documentation that the choice is between OIDC/Oauth2.1 or a PAT - Granted that I don't want users to have to provide a PAT, I've opted to use the Oauth2.1 solution.

GitHub mentions that in order to use Oauth2.1/OIDC one needs to provide a GitHub App or Oauth App for OIDC to work. I've created a GitHub App and configured LibreChat with this:

 mcpServers:
      github:
        type: streamable-http
        url: "https://api.githubcopilot.com/mcp/"
        initTimeout: 150000
        oauth:
          client_id: "${GITHUB_APP_CLIENT_ID}"
          client_secret: "${GITHUB_APP_CLIENT_SECRET}"
          redirect_uri: "https://LIBRECHATURL/oauth/callback"

Both the ID and the Secret are available to LibreChat in its environment variables.

When starting LibreChat I see:

2025-08-05 19:16:56 info: Initializing MCP servers...
2025-08-05 19:16:56 info: [MCP][github] Access token missing
2025-08-05 19:16:56 info: [MCP][github] Access token missing and no refresh token available
2025-08-05 19:16:56 info: [MCP][github] Setting up OAuth event listener
2025-08-05 19:16:56 info: [MCP][github] Creating streamable-http transport: https://api.githubcopilot.com/mcp/
2025-08-05 19:16:57 error: [MCP][github] Transport error: Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:16:57 info: [MCP][github] Streamable-http transport closed
2025-08-05 19:16:57 warn: [MCP][github] OAuth authentication required
2025-08-05 19:16:57 info: [MCP][github] OAuth required, skipping at startup
2025-08-05 19:16:57 error: [MCP][github] OAuth handling failed: OAuth authentication skipped at startup
2025-08-05 19:16:57 error: [MCP][github] Connection failed: Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:16:57 info: [MCP][github] OAuth required, stopping connection attempts
2025-08-05 19:16:57 error: [MCP][github] Initialization failed Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:16:57 error: [MCP][github] Initialization failed Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:16:57 info: [MCP] Initialized 1/1 app-level server(s)
2025-08-05 19:16:57 info: [MCP][github] ✗ Failed
2025-08-05 19:16:58 info: MCP servers initialized successfully

Later on, when trying to click the Authenticate button for the GitHub MCP Server in LibreChat, I see the following output in my logs:

2025-08-05 19:17:46 info: [MCP Reinitialize] Reinitializing server: github
2025-08-05 19:17:46 info: [MCP Reinitialize] Disconnected existing server: github
2025-08-05 19:17:46 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] Establishing new connection
2025-08-05 19:17:46 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] Access token missing
2025-08-05 19:17:46 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] Access token missing and no refresh token available
2025-08-05 19:17:47 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] Creating streamable-http transport: https://api.githubcopilot.com/mcp/
2025-08-05 19:17:47 error: [MCP][User: 68663a11fa9aaddbac7a879b][github] Transport error: Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:17:47 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] Streamable-http transport closed
2025-08-05 19:17:47 warn: [MCP][User: 68663a11fa9aaddbac7a879b][github] OAuth authentication required
2025-08-05 19:17:47 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] oauthRequired event received
2025-08-05 19:17:47 error: [MCPOAuth] Failed to initiate OAuth flow
2025-08-05 19:17:47 error: [MCP][User: 68663a11fa9aaddbac7a879b][github] Failed to initiate OAuth flow Incompatible auth server: does not support dynamic client registration
2025-08-05 19:17:47 error: [MCP][User: 68663a11fa9aaddbac7a879b][github] OAuth handling failed: OAuth initiation failed
2025-08-05 19:17:47 error: [MCP][User: 68663a11fa9aaddbac7a879b][github] Connection failed: Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:17:47 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] OAuth already handled by connection
2025-08-05 19:17:47 info: [MCP][User: 68663a11fa9aaddbac7a879b][github] OAuth required, stopping connection attempts
2025-08-05 19:17:47 error: [MCP][User: 68663a11fa9aaddbac7a879b][github] Failed to establish connection Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:17:47 info: [MCP Reinitialize] getUserConnection threw error: Error POSTing to endpoint (HTTP 401): bad request: missing required Authorization header

2025-08-05 19:17:47 info: [MCP Reinitialize] OAuth state - oauthRequired: false, oauthUrl: null
2025-08-05 19:17:47 info: [MCP Reinitialize] OAuth required for github (isOAuthError: true, oauthRequired: false, isOAuthFlowInitiated: false)

Has anyone gotten this (Remote GitHub MCP with OIDC) working on LibreChat?

It seems weird that it tries dynamic client registration when I've already given it (LibreChat) access to a GitHub App client.

[ronak21691]

Did you manage to solve it?

I am trying same with Google Workspace MCP - https://github.com/taylorwilsdon/google_workspace_mcp, so far no luck
I have raised issue on Google Workspace MCP repo as well - taylorwilsdon/google_workspace_mcp#162

[mrh-chain]

I never got it working - As a stop gap I've enabled the usage of the MCP server with a PAT for my users - Not as pretty as using Oauth, but at least it works.

Was looking at trying the Workspace MCP as well, good to know that it also isn't working!

[ronak21691]

I am guessing this solves this - #8930
not sure though

[danny-avila]

I am guessing this solves this - #8930

This is unrelated to the issue with the GitHub MCP Server.

It also doesn't work with Claude solutions (desktop, web, etc.) due to not following OAuth Specification for MCP, see:

• Remote: Incompatibility with Claude (Web) Integrations github/github-mcp-server#549
• Unable to add remote mcp server in Claude Desktop github/github-mcp-server#799

Something would need to change with GitHub MCP Server or the MCP SDK.

[danny-avila]

Note @mrh-chain that we do support additional OAuth fields if you want to try again with more in the configuration:
https://www.librechat.ai/docs/configuration/librechat_yaml/object_structure/mcp_servers#oauth