io.github.4hmetuyar/oauth-auditor

io.github.4hmetuyar/oauth-auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

View repository →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "oauth-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-oauth-auditor@0.1.2"
      ]
    }
  }
}

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.1.2
Registry
active
Published
9/28/2026

More Developer Tools servers

Browse all Developer Tools →

io.github.4hmetuyar/prompt-injection-scanner

GuardBee

Scans RAG content/scraped pages for indirect prompt injection

Developer ToolsAdded 1 month ago

io.github.4hmetuyar/rug-pull-detector

GuardBee

Baselines an MCP server's tools and detects tool-definition changes after approval

Developer ToolsAdded 1 month ago

io.github.4hmetuyar/security-proxy

GuardBee

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Developer ToolsAdded 1 month ago

io.github.4hmetuyar/security-suite

GuardBee

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

Developer ToolsAdded 1 month ago

io.github.4hmetuyar/slopsquat-scanner

GuardBee

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

Developer ToolsAdded 1 month ago

io.github.4hmetuyar/tool-poisoning-scanner

GuardBee

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Developer ToolsAdded 1 month ago

Add the badge to your site

Show visitors that io.github.4hmetuyar/oauth-auditor is listed here — it’s also the link we check for a free listing.

io.github.4hmetuyar/oauth-auditor — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-4hmetuyar-oauth-auditor?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="io.github.4hmetuyar/oauth-auditor — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![io.github.4hmetuyar/oauth-auditor — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-4hmetuyar-oauth-auditor?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.