Using ZeroAuth as the identity provider for an MCP server

[JirA44]

I’m evaluating ZeroAuth for a local MCP server used through OpenAI’s Secure MCP Tunnel. The server currently validates access tokens using RS256 and JWKS, and checks the issuer, audience, scopes (tasks:submit, tasks:read, tasks:cancel) and a custom project_ids claim.

Could ZeroAuth support this setup? In particular:

• Does it issue access tokens signed with RS256, and expose a stable JWKS endpoint with key rotation?
• Can an application/API define a custom audience, scopes and namespaced claims such as project_ids?
• Can you share a sample access-token payload and the issuer/audience configuration for a third-party resource server?
• Is there public pricing for this OAuth/OIDC use case, including a self-hosted option?
  I’m happy to test an integration and report compatibility results. I would not use real user or production credentials for initial testing.