Portfolio MCP Server - Sign-In with Ethereum (SIWE)

Portfolio MCP Server - Sign-In with Ethereum (SIWE)

An MCP server that lets an AI client (ChatGPT / Claude) read auser's Ymax portfolio - where the user logs in with their Ethereum wallet.

The whole point of this repo is the auth: proving that wallet login (SIWE) can be plugged intothe OAuth flow that MCP clients require, and then using the proven wallet address to authorizeaccess to that wallet's portfolio. The two tools (get_positions, get_allocation) are just there to have something to protect.

1. How it fits together

Four moving parts:

2. Setup part A - Auth0 as the authorization server

Auth0 tenant used here: rabi-mcp (domain rabi-mcp.us.auth0.com).

A.1 - Enable Dynamic Client Registration

Settings → Advanced → "Enable Dynamic Client Registration" = Open Dynamic Registration.

This lets ChatGPT self-register. (Open DCR = anyone can register without a token)

A.2 - Create the API (this is the token audience)

Applications → APIs → Create API:

• Name: my-mcp
• Identifier: https://auth0-siwe-tesj4.sevalla.app/mcp(must equal the server's public /mcp URL - it becomes the token's aud claim)
• Signing Algorithm: RS256 (the MCP server verifies against the RS256 JWKS)

A.3 - Define the portfolio scopes

On the API's Permissions tab, add:

A.4 - Enable RBAC

On the API's Settings tab, turn both ON:

• Enable RBAC
• Add Permissions in the Access Token

A.5 - Authorize third-party (DCR) apps ⚠️ easy to miss

Still on the API's Settings tab, under "Default Permissions for third-party applications":

• User-delegated access = Authorized
• Select the two portfolio:* scopes.

DCR clients are always third-party in Auth0 - you can't grant permissions per-app, so thistenant-level default is the only thing that lets ChatGPT request the API at all. Skip it and youget Client is not authorized to access resource server.

3. Setup part B - SIWE as a login method

Auth0 has a Sign-In with Ethereum marketplace connection (by SpruceID). Add it and promote it to domain level so every app (including DCR clients) can use it:

Authentication → Social → add "Sign-In with Ethereum", then→ the connection → Advanced → Promote to Domain Level → SAVE.

Why the marketplace connection alone fails

Out of the box that connection points at SpruceID's public provider, oidc.login.xyz, whichapparently sits behind a Cloudflare bot challenge. A login has two kinds of calls:

• /authorize runs in your browser - the browser solves Cloudflare's JS challenge. ✅
• /token and /userinfo are server-to-server calls from Auth0's backend - a backend can'tsolve a JS challenge, so it gets a Cloudflare HTML page instead of JSON. ❌

Result: login gets partway, then dies at /authorize/resume with a generic "Oops! something went wrong", and the Auth0 logs show a Cloudflare "Just a moment…" page on /userinfo.

Fix: run your own copy of the SIWE provider (part C), then repoint Auth0 at it (part D).

4. Setup part C - self-hosting the SIWE provider

SpruceID open-sources the provider: spruceid/siwe-oidc.We run our own instance so Auth0's server-to-server calls hit a normal server (no Cloudflare).

Everything for this lives in siwe-oidc/ (Dockerfile, docker-compose, README).

5. Setup part D - point Auth0 at your instance

The Auth0 SIWE connection still targets oidc.login.xyz, and its dashboard form doesn't expose the endpoint URLs (they live in the connection's internal options + a "fetch user profile" script). So edit it via the Auth0 Management API.

D.1 - Register a client on your instance

curl -X POST https://<your-siwe-url>/register \
  -H 'Content-Type: application/json' \
  -d '{"redirect_uris":["https://rabi-mcp.us.auth0.com/login/callback"]}'
# returns client_id + client_secret

D.2 - Get a Management API token

Auth0 → APIs → Auth0 Management API → API Explorer → Create & Authorize Test App → copy token.

D.3 - Repoint the connection

PATCH /api/v2/connections/{connection_id} (strategy oauth2), changing from oidc.login.xyz →your instance:

• options.authorizationURL → https://<your-siwe-url>/authorize
• options.tokenURL → https://<your-siwe-url>/token
• the /userinfo URL inside options.scripts.fetchUserProfile ← the exact call that had failed
• options.client_id / options.client_secret → the pair from D.1

After this, Auth0's server-to-server calls hit your Cloudflare-free instance and login completes.

6. Setup part E - grant portfolio scopes to wallet users

A freshly-signed-in wallet is a brand-new user with no permissions, so every tool would returnForbidden. We attach the portfolio scopes at login via an Auth0 Action.

Why a custom claim, not addScope()

Auth0 silently ignores api.accessToken.addScope() for third-party (DCR) apps - i.e. every MCPclient. (The tenant log literally says "these scopes were ignored.") Custom claims are neverfiltered, so we use one:

// Auth0 Action - Login flow - "post-login-scopes"
exports.onExecutePostLogin = async (event, api) => {
  api.accessToken.setCustomClaim('https://ymax.app/scopes', [
    'portfolio:positions',
    'portfolio:allocation',
  ]);
};

• The namespace must be a valid URL (https://ymax.app/scopes). A bare https://ymax/scopes is silently dropped (invalid host).
• Add the Action to the Login flow.
• The MCP server's verifier merges this claim into the token's scope list (see below).

7. The MCP server code

Three files do the work:

src/auth.ts - token verification + resource metadata

• On startup, fetches Auth0's OIDC discovery document and builds a cached remote JWKS.
• verifyAccessToken runs jwtVerify (signature + issuer + audience + expiry). On failure itrethrows as the SDK's InvalidTokenError so the client gets a 401 (not a 500) and re-auths.
• Merges three claim sources into one scopes[] list - because Auth0 delivers scopes differently depending on setup:
  • scope - space-delimited standard OAuth scopes
  • permissions - array, from Auth0 RBAC
  • https://ymax.app/scopes - the namespaced custom claim from the Action (reliable for DCR apps)
• Serves /.well-known/oauth-protected-resource/mcp (RFC 9728) naming Auth0 as the authorizationserver, and returns the requireBearerAuth middleware that guards POST /mcp.

src/create-server.ts - the tools + authorization

• requireScope(extra, scope) throws McpError unless the token carries the scope.

• requirePortfolio(extra) extracts the 0x… address from the token sub (regex, robust to thedid:pkh / eip155 encoding), then calls GET https://main1.ymax.app/portfolios/by-wallet/{addr}:

  • 200 → authorized, returns the portfolio (incl. portfolioId)
  • 404 → Forbidden: this wallet has no Ymax portfolio
  • no address → Forbidden: no wallet identity on the token

• Two tools, each gated by both a scope and portfolio ownership:

  Tool	Scope	Returns
  get_positions	portfolio:positions	positions, balances, total value
  get_allocation	portfolio:allocation	target allocation

src/http.ts - the Express host

Wires POST /mcp behind requireAuth, exposes GET /health, logs every request. Listens onprocess.env.PORT || 3000.

8. Deploy on Sevalla

This repo (the MCP server) deploys as its own Sevalla app from GitHub (rabi-siddique/auth0-siwe):

1. Create the Application from the repo, branch main.
2. Set the environment variables below.
3. Ensure the container port matches what the app listens on. Sevalla routes to 8080; the appreads process.env.PORT, which Sevalla injects. If /health 404s after deploy, add PORT=8080explicitly.
4. Deploy. Env-var changes require a redeploy to take effect.

Deployed URL for this instance: https://auth0-siwe-tesj4.sevalla.app.

siwe-oidc is a separate Sevalla app (see part C) with its own env - it does not share thisapp's .env.

9. Environment variables

Only three - the MCP server is a pure resource server:

AUTH0_AUDIENCE and MCP_SERVER_URL must both point at this deployment's domain, andAUTH0_AUDIENCE must match the Auth0 API identifier exactly - otherwise every token's aud failsverification (401) or discovery breaks.

The server fails fast: if any of the three are missing it throws at startup and exits (so a missingvar shows up as the whole app being down / 404, not a per-request error).

10. Sequence diagram

sequenceDiagram
    autonumber
    participant U as You (browser + wallet)
    participant C as ChatGPT (MCP client)
    participant M as Portfolio MCP Server
    participant A as Auth0 (Auth Server)
    participant S as siwe-oidc (self-hosted)
    participant W as Wallet (WalletConnect)
    participant Y as Ymax API

    Note over C,M: - Discovery (RFC 9728) -
    C->>M: POST /mcp  (no token)
    M-->>C: 401 + WWW-Authenticate: resource_metadata=...
    C->>M: GET /.well-known/oauth-protected-resource/mcp
    M-->>C: { authorization_servers: ["https://rabi-mcp.../"] }
    C->>A: GET /.well-known/openid-configuration
    A-->>C: endpoints (authorize, token, register, jwks)

    Note over C,A: - Dynamic Client Registration -
    C->>A: POST /oidc/register
    A-->>C: { client_id: "tpc_..." }

    Note over U,W: - Wallet login (SIWE) -
    C->>A: GET /authorize?client_id=...&resource=.../mcp&code_challenge=...
    A->>U: Auth0 login page → pick "Sign-In with Ethereum"
    A->>S: redirect to siwe-oidc /authorize
    S->>U: render SIWE page (WalletConnect QR)
    U->>W: scan QR + connect
    S->>W: present SIWE message
    W-->>S: signed message
    S->>S: verify signature
    S-->>A: redirect ?code=...
    A->>S: POST /token + GET /userinfo (server-to-server, no Cloudflare)
    S-->>A: { sub: "eip155:1:0xABC..." }
    A-->>C: redirect ?code=... → then token exchange
    C->>A: POST /oauth/token (code + code_verifier)
    A-->>C: access_token (JWT, sub = wallet, scopes via Action claim)

    Note over C,Y: - Authenticated tool call -
    C->>M: POST /mcp  tools/call get_positions  Authorization: Bearer JWT
    M->>A: (fetch JWKS - cached)
    M->>M: jwtVerify - signature + issuer + audience + expiry
    M->>M: requireScope("portfolio:positions")
    M->>M: extract 0x address from token sub
    M->>Y: GET /portfolios/by-wallet/{address}
    alt owns a portfolio (200)
        Y-->>M: { portfolioId, latestSnapshot, ... }
        M-->>C: ✅ portfolio positions
    else owns none (404)
        Y-->>M: 404
        M-->>C: ❌ Forbidden: no Ymax portfolio
    end

Companion files: siwe-oidc/ (self-hosted provider - Dockerfile, docker-compose,deploy notes).