MCP Authorization Tools
Static OAuth and authorization utilities for modern MCP deployments. Validate authorization-server metadata, protected-resource discovery, issuer relationships, client metadata and redirect URIs without performing live OAuth requests.
OAuth Metadata Validator
Check issuer, endpoints, PKCE and CIMD support.
AuthorizationProtected Resource Metadata Validator
Validate resource and authorization-server metadata.
AuthorizationAuthorization Config Checker
Cross-check resource and authorization metadata.
AuthorizationOAuth Issuer Validator
Detect issuer and credential-binding mismatches.
AuthorizationClient Metadata Validator
Validate Client ID Metadata Documents.
AuthorizationRedirect URI Checker
Check OAuth callback URI structure.
Authorization in MCP 2026-07-28
The current specification strengthens authorization server issuer validation, binds client credentials to the issuer that created them and prefers Client ID Metadata Documents over Dynamic Client Registration.
These utilities perform static validation only. They do not exchange authorization codes, fetch metadata, inspect live access tokens or contact identity providers.