---
title: "Watchword Auth Setup Guide — Production OAuth, JWT/JWKS, and Bearer Patterns"
description: "Production-grade authentication for Watchword and any MCP server you ship: bearer tokens, JWT/JWKS against Auth0, Keycloak, Cognito, Cloudflare Access, OAuth 2.1 + PKCE for Claude.ai, RFC 9728 metadata, and 27…"
canonical: https://giglabo.com/heretic/tools/watchword/auth-setup-guide
locale: en
---

# Watchword Auth Setup Guide — Production OAuth, JWT/JWKS, and Bearer Patterns

> Markdown twin of https://giglabo.com/heretic/tools/watchword/auth-setup-guide
> Fetch this instead of the HTML page: same content, a fraction of the bytes.
> Site structure and the full page list for agents: https://giglabo.com/llms.txt

Production-grade authentication for Watchword and any MCP server you ship: bearer tokens, JWT/JWKS against Auth0, Keycloak, Cognito, Cloudflare Access, OAuth 2.1 + PKCE for Claude.ai, RFC 9728 metadata, and 27…

## Related

- HTML version of this page: https://giglabo.com/heretic/tools/watchword/auth-setup-guide
- Site map for agents: https://giglabo.com/llms.txt