Developer · Local MCP server

Oauth Auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience.

What the MCP Registry states

The entry as published to the official MCP Registry (read 2026-10-04), latest version.

Registry name
io.github.4hmetuyar/oauth-auditor
Version
0.1.2
Status
Active
Category
developer
Transport
stdio (local process)
Package
npm
Published
2026-09-28
Updated
2026-09-28
Publisher
4hmetuyar (GitHub) · 26 servers with pages here
Repository
github.com/GuardBee/guardbee-mcp (folder packages/oauth-auditor)
Source
Registry API entry

Packages

RegistryPackageVersionTransportEnvironment variables
npm@guardbee/mcp-oauth-auditor0.1.2stdioNone declared

How to connect Oauth Auditor

Oauth Auditor runs locally from a Node.js package published to the npm registry: @guardbee/mcp-oauth-auditor version 0.1.2. It speaks MCP over stdio, so the client starts it as a program and talks to it through standard input and output. It needs Node.js; clients usually start it with npx — the usual command is npx -y @guardbee/mcp-oauth-auditor@0.1.2.

In the mcpServers JSON format that many desktop and editor MCP clients read, the entry looks like this (placeholders in angle brackets):

{
  "mcpServers": {
    "oauth-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-oauth-auditor@0.1.2"
      ]
    }
  }
}

Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect

More from 4hmetuyar (GitHub)

ServerRunsEndpoint or package
Elicitation AuditorMCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs.Local · stdionpm: @guardbee/mcp-elicitation-auditor
Llm RedteamActive jailbreak/extraction/obfuscation red-teaming for live LLM endpoints.Local · stdionpm: @guardbee/mcp-llm-redteam
MCP Config AuditorScans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats.Local · stdionpm: @guardbee/mcp-config-auditor
MCP Server AuditorScans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets.Local · stdionpm: @guardbee/mcp-server-auditor
Memory Poisoning ScannerScans agent code for untrusted input poisoning persistent cross-session memory.Local · stdionpm: @guardbee/mcp-memory-poisoning-scanner
Model ScannerScans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks.Local · stdionpm: @guardbee/mcp-model-scanner
Prompt Injection ScannerScans RAG content/scraped pages for indirect prompt injection.Local · stdionpm: @guardbee/mcp-prompt-injection-scanner
Prompt Leak ScannerCatches leaked credentials and PII in outbound LLM prompts.Local · stdionpm: @guardbee/mcp-prompt-leak-scanner
Rug Pull DetectorBaselines an MCP server's tools and detects tool-definition changes after approval.Local · stdionpm: @guardbee/mcp-rug-pull-detector
Secret ScannerScans files for leaked secrets and API keys.Local · stdionpm: @guardbee/mcp-secret-scanner
Security ProxyMCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log.Local · stdionpm: @guardbee/mcp-security-proxy
Security SuiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence.Local · stdionpm: @guardbee/security-suite

More developer servers

All 6,250 →
ServerRunsEndpoint or package
nyxoryAgent-to-agent cloud service: deploys and runs your apps and services — domains, logs, real status.Remote & Local · HTTP, stdioapi.nyxory.com
O'Reilly Expert MCP ServerGrounded, citable answers to tech questions from O'Reilly's library. Requires Expert MCP access.Remote · HTTPapi.oreilly.com
O'Reilly Media MCP ServerSearch O'Reilly for tech books, courses, events, and more. Requires an O'Reilly subscription.Remote · HTTPapi.oreilly.com
O360 MCPRun Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes.Local · stdionpm: o360-mcp
ObelinfMCP server for Obelinf, the network documentation platform. Sites, racks, devices, IPs, VLANs.Remote · HTTPapi.obelinf.com
Obra CtoLocal-first MCP that scores your codebase's build readiness. Your code never leaves your machine.Local · stdionpm: obra-cto
Obscura MCPMCP server adapter for Obscura Rust headless browser — web scraping with anti-detection.Local · stdionpm: obscura-mcp
Obsd LaunchpadMCP server for AI agents to deploy tokens on Base. One command launch, earn OBSD forever.Local · stdionpm: obsd-launchpad-mcp