tollbooth-oauth2-collector

Tollbooth OAuth2 Collector — unauthenticated mailbox for OAuth2 authorization codes. This is a community utility with no monetization. ## How It Works 1. An MCP server directs the user's browser to an OAuth provider, with `redirect_uri` pointing to the serverless callback function. 2. After the user authorizes, the provider redirects the browser to the callback, which calls `store_code` on this collector via MCP. 3. The originating MCP server calls `retrieve_code(state=...)` to pick up the encrypted code (one-time read, auto-deleted). ## Tools - `store_code` — Store an encrypted authorization code (called by the serverless callback). - `retrieve_code` — Retrieve and delete a stored code (called by the originating MCP server). - `collector_status` — Health check showing pending code count and TTL. - `service_status` — Report the running build (incl. the deployed git sha) so a redeploy can be verified.