TO

Tollbooth Oauth2 Collector

io.github.lonniev/tollbooth-oauth2-collector

Unauthenticated OAuth2 callback collector for Tollbooth MCP services

Yes, your AI can use this right now.Answered a live MCP handshake in 554 ms with no sign-in needed and exposes 4 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://tollbooth-oauth2-collector.fastmcp.app/mcp

4 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.
store_code

Store a sealed OAuth2 authorization code. Called by the serverless callback function after the browser redirect. The ``state`` carries BOTH the patron npub (the lookup/retrieve key) and the operator npub (the PUBLIC key the code is sealed to) — see the SDK's ``pack_oauth_state``. The code is sealed with NIP-44 to the operator so only that operator's nsec can open it; the Neon row is keyed by th

retrieve_code

Retrieve a stored authorization code (one-time read, auto-deleted). Called by the originating MCP server to pick up the code after the user has authorized in the browser. Returns the encrypted code which the caller decrypts using the same state token.

collector_status

Health check — shows the number of pending authorization codes and TTL.

service_status

Report the running build so a redeploy can be verified. Free. Delegates to the SDK's canonical ``build_service_status`` — the single source of the service_status payload shape — so this collector reports the same envelope as every other DPYC service. The load-bearing field is ``build_info.fastmcp_cloud_git_commit_sha``: the commit Horizon actually deployed. The post-merge deploy-verify probe

Alternatives in Developer Tools

Compare →
Try “Notion”, “Stripe”, “create invoice”, “browser”