OAuth2 Authorization Code Collector

A community utility that solves one narrow, genuinely irritating problem.

OAuth2 was designed for browsers. An agent that needs to authorize against a third-party service has no browser, no redirect handler, and nowhere for the provider to send the authorization code. The collector supplies the missing piece: a serverless callback receives the redirect from the OAuth provider, stores the code, and an MCP tool retrieves it so the agent can complete the exchange.

Two halves, one job. A callback endpoint that catches the browser redirect, and an MCP interface that hands the code to whoever was waiting for it. Free, shared, and used across the fleet wherever a patron has to authorize an Operator against an account of their own.

It pairs naturally with Tollbooth Shortlinks, since an OAuth redirect URL is exactly the sort of unreadable string nobody should have to retype on a phone.

At a glance

🔓 Apache 2.0 top to bottom — no open core, no paid tier
🔌 Built on FastMCP 3.4.7 — any compliant MCP client connects
🤝 Honors the DPYC Social Contract
🆓 Free. Codes are held only long enough for the agent to collect them

Links

GitHub: lonniev/tollbooth-oauth2-collector
🔌 Connect: tollbooth-oauth2-collector.fastmcp.app
↩ Callback: tollbooth-dpyc-oauth.val.run