From the README

# 🐘 simplemcp 🐘

simplemcp is a simple php mcp server. it auto-discovers tool classes via reflection, loads them from a directory you point it at, and authenticates requests via a static bearer token or rotating totp codes (rfc 6238).

## installation

```sh
composer require vielhuber/simplemcp
```

## configuration

```sh
python3 -c "import pyotp; print('MCP_TOKEN=' + pyotp.random_base32())" > .env
```

## authentication

**`static`**

```
Authorization: Bearer <MCP_TOKEN>
```

**`totp`**

`MCP_TOKEN` is a base32-encoded shared secret (rfc 6238). the bearer is a fresh 6-digit totp code (30-second window, ±1 step tolerance). the server implements the algorithm natively, no extra library needed. on the client (python/fastmcp):

```python
import pyotp
token = pyotp.TOTP("MCP_TOKEN").now()
# send as: Authorization: Bearer <token>
```

## usage

configure the constructor at the bottom of `mcp-server.php`:

```php
require __DIR__ . '/vendor/autoload.php';
use vielhuber\simplemcp\simplemcp