Clerk Provider

CLERK_FRONTEND_API_URL=https://verb-noun-42.clerk.accounts.dev
# Optional when Clerk emits a dedicated access-token audience:
# CLERK_AUDIENCE=https://api.example.com

import { MCPServer } from "mcp-use";
import { oauthClerkProvider } from "mcp-use/oauth/clerk";

const frontendApiUrl = process.env.CLERK_FRONTEND_API_URL;
if (!frontendApiUrl) {
  throw new Error("CLERK_FRONTEND_API_URL is required");
}

const server = new MCPServer({
  name: "clerk-server",
  version: "1.0.0",
  oauth: oauthClerkProvider({
    frontendApiUrl,
    ...(process.env.CLERK_AUDIENCE
      ? { audience: process.env.CLERK_AUDIENCE }
      : {}),
    scopesSupported: ["profile", "email", "offline_access", "user:org:read"],
  }),
});

export default server;

server.tool(
  {
    name: "list_documents",
    description: "List documents for the Clerk organization.",
  },
  async (_args, ctx) => {
    const organizationId = ctx.auth.user.organizationId;
    if (
      !organizationId ||
      !ctx.auth.permissions.includes("org:documents:read")
    ) {
      return {
        isError: true,
        content: [{ type: "text", text: "Organization access required" }],
      };
    }

    const documents = await db.documents.findMany({
      where: { organizationId },
    });
    return {
      content: [{ type: "text", text: JSON.stringify(documents) }],
    };
  },
);