I
io.github.4hmetuyar/oauth-auditor
@guardbee/mcp-oauth-auditor
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
No known CVEs
No license
Actively maintained
Last commit 1d ago
Works with most clients
Transport: stdio
0 tools
Grade F
MCPpedia last refreshed this data
io.github.4hmetuyar/oauth-auditor is an MCP server that scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience. Its tool list has not been published yet over stdio, requires no API key, and scores 55/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io-github-4hmetuyar-oauth-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-oauth-auditor"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-4hmetuyar-oauth-auditor)
Read me
What io.github.4hmetuyar/oauth-auditor does
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y '@guardbee/mcp-oauth-auditor' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
55/100across 5 weighted dimensions
0255075100
20
14
11
10
−45
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked @guardbee/mcp-oauth-auditor against OSV.dev.
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.4hmetuyar/oauth-auditor safe to use?
- io.github.4hmetuyar/oauth-auditor has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
- How do I install io.github.4hmetuyar/oauth-auditor?
- Install io.github.4hmetuyar/oauth-auditor via npm: `npx @guardbee/mcp-oauth-auditor`. Then add it to your MCP client config file.
- What AI clients work with io.github.4hmetuyar/oauth-auditor?
- io.github.4hmetuyar/oauth-auditor is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is io.github.4hmetuyar/oauth-auditor actively maintained?
- io.github.4hmetuyar/oauth-auditor is actively maintained - last commit was 1 day ago.
Related
Similar servers
Others in security / marketing
I
io.github.vmoranv/jshookmcp93MCP server for JavaScript analysis, security auditing, browser automation and hooks
2.0k 2
I
io.github.arthurpanhku/dvalincode92Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
120 1
Seo92The only SEO skill your agent needs. 50+ SEO audit tools through a local CLI and MCP server, using your own crawl, Search Console, and GA4 data.
545 2
Ida Pro Mcp92AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
12.4k 3
MCP Security Weekly
Get CVE alerts and security updates for io.github.4hmetuyar/oauth-auditor and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.