mcp-auth-doctor good first issues (Python)

Warn when the challenge scope and `scopes_supported` disagree in kind 9 days ago

help wanted good first issue hacktoberfest

0

Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, token endpoint error format and an optional PKCE login, checked against the MCP 2026-07-28 and 2025-11-25 authorization rules. Read-only CLI, httpx only, pipx or uvx.

Python

#authorization#claude-code#cli#developer-tools#diagnostics#hacktoberfest#mcp#mcp-server#model-context-protocol#oauth#oauth2#openid-connect#pkce#python#rfc8414#rfc8707#rfc9728#security-tools

Add `--format markdown` for pasting the report into an issue 12 days ago

help wanted good first issue hacktoberfest

basitalisandhu/mcp-auth-doctor

0

Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, token endpoint error format and an optional PKCE login, checked against the MCP 2026-07-28 and 2025-11-25 authorization rules. Read-only CLI, httpx only, pipx or uvx.

Python

#authorization#claude-code#cli#developer-tools#diagnostics#hacktoberfest#mcp#mcp-server#model-context-protocol#oauth#oauth2#openid-connect#pkce#python#rfc8414#rfc8707#rfc9728#security-tools

Add an `as-https` check for endpoint URLs 20 days ago

help wanted good first issue hacktoberfest

basitalisandhu/mcp-auth-doctor

0

Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, token endpoint error format and an optional PKCE login, checked against the MCP 2026-07-28 and 2025-11-25 authorization rules. Read-only CLI, httpx only, pipx or uvx.

Python

#authorization#claude-code#cli#developer-tools#diagnostics#hacktoberfest#mcp#mcp-server#model-context-protocol#oauth#oauth2#openid-connect#pkce#python#rfc8414#rfc8707#rfc9728#security-tools

Add a `-H/--header` option for extra request headers 21 days ago

help wanted good first issue hacktoberfest

basitalisandhu/mcp-auth-doctor

0

Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, token endpoint error format and an optional PKCE login, checked against the MCP 2026-07-28 and 2025-11-25 authorization rules. Read-only CLI, httpx only, pipx or uvx.

Python

#authorization#claude-code#cli#developer-tools#diagnostics#hacktoberfest#mcp#mcp-server#model-context-protocol#oauth#oauth2#openid-connect#pkce#python#rfc8414#rfc8707#rfc9728#security-tools

Add a `prm-bearer-methods` check 21 days ago

help wanted good first issue hacktoberfest

basitalisandhu/mcp-auth-doctor

0

Diagnose OAuth discovery problems on remote MCP servers: the 401 challenge, RFC 9728 protected resource metadata, authorization server metadata, PKCE S256, client registration, token endpoint error format and an optional PKCE login, checked against the MCP 2026-07-28 and 2025-11-25 authorization rules. Read-only CLI, httpx only, pipx or uvx.

Python

#authorization#claude-code#cli#developer-tools#diagnostics#hacktoberfest#mcp#mcp-server#model-context-protocol#oauth#oauth2#openid-connect#pkce#python#rfc8414#rfc8707#rfc9728#security-tools

basitalisandhu/mcp-auth-doctor

Open Issues Need Help