Guides and TutorialsModel Context Protocol (MCP)
MCP Examples
Learn how to build secure MCP servers with Descope through these step-by-step examples:
Travel Booking MCP Server
Build an MCP server for a consumer (B2C) travel app:
- Customers sign in with the passkeys or social login they already use in your app
- Policies give every customer read tools, limit booking to verified clients, and unlock price alerts for premium members
- The server calls your own Bookings API with token exchange, so the API only accepts tokens minted for it
- Customers connect Google Calendar only when they first ask to add a trip, using Adaptive Connect
Multi-Tenant MCP Server
Run one MCP server for users across different tenants:
- One MCP URL and consent flow: users pick their tenant at sign-in via the tenant selector
- One scope per tool; access policies decide which tools each tenant's users get at consent
- The server stays tenant-agnostic: no tenant-to-tools map in code, and onboarding a new organization is a policy change, not a redeploy
- Tools read the active tenant from the token's
dctclaim; switching organizations means re-authenticating for a new token
Additional Resources
For more example MCP servers, please refer to our GitHub repository.
Was this helpful?
Model Context Protocol (MCP)
Learn how to use Descope to secure and authorize Model Context Protocol (MCP) servers with inbound, outbound, and SDK-based flows.
Travel Booking MCP Server
Build a consumer MCP server for a travel app, with passkey or social sign-in, policy-driven tools, token exchange, and Adaptive Connect.