MCP OAuth checker

Test every discovery step before login: the MCP challenge, resource metadata, authorization server, client registration options, PKCE and callback expectations. See the evidence and what to fix.

Free, read-only checks. No credentials, storage, client registration or login. Metadata uses the restricted discovery proxy when CORS prevents direct reads. The MCP challenge is read directly from your browser.

How MCP OAuth discovery works, step by step