mcp-server-auth
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a diagnostic script
scripts/check_auth_endpoints.pywhich is used to probe MCP server endpoints. It performs network requests to verify the presence and correctness of OAuth 2.1 discovery metadata (RFC 9728) and authorization server metadata (RFC 8414). - [EXTERNAL_DOWNLOADS]: The skill references
@modelcontextprotocol/conformance, which is the official conformance testing suite from the Model Context Protocol organization, used for validating server implementations. - [SAFE]: The skill provides security-focused advice, such as avoiding token passthrough, enforcing audience validation (RFC 8707), and using PKCE (S256), which aligns with modern security best practices for authorization.
Audit Metadata