The Auth Stack for AI applications

const opts = { organizationId : 'org_123',connectionId:’conn_456’,loginHint:‘user@corp.com’ };
const authUrl = scalekit.getAuthorizationUrl('https://yourapp.com/auth/callback',opts);
// Redirect user to authUrl
// After login, handle callback with ?code=...
const {code} = req.query
const result = await scalekit. authenticateWithCode(code,
‘https =//yourapp.com/auth/callback');
const user = result.user;

curl = 'https://$SCALEKIT_ENVIRONMENT_URL/api/v1/users/{id}' \
  --request PATCH \
  --header 'Content-Type: application/json' \
  --data '{
    "external_id": "ext_12345a67b89c",
    "metadata": {"department": "engineering", "location": "nyc-office"},
    "user_profile": {
       "custom_attributes": {"department": "engineering", "security clearance": "level12"},
       "first_name": "John", "last_name":"Doe", "locale": "en-US",
       "metadata": {"account_status": "active", "signup_source": "mobile_app"},
       "name": "John Michael Doe", "phone_number":"+14155552671"
    }
)’

const RESOURCE_ID = 'https://your-mcp-server.com';

const resource_metadata_endpoint = 'https://your-mcp-server.com/.well-known/oauth-protected-resource';

app.get('/.well-known/oauth-protected-resource', (req, res) => res.json({
  authorization_servers: ['https://your-app.scalekit.com/resources/xxx'],
    bearer_methods_supported: ['header'],
    resource: RESOURCE_ID
}));

app.use(async (req, res, next) => {
  const token = req.headers['authorization']?.split('Bearer')[1]?.trim();
    if (!token) return res.sendStatus(401);
    await scalekit.validateToken(token, { audience: [RESOURCE_ID] });
    next();
}));