More screenshots

    Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIGitHub CopilotGitHub CopilotGemini CLIGemini CLI+20 more

    🔐 MCP OAuth & Authorization Contract Preflight

    2

    Preflight redacted MCP 2026-07-28 OAuth evidence for issuer discovery, registration, PKCE, scopes, token audience, refresh behavior, and role-specific gaps.

    $19

    Secure checkout via Stripe

    30-day refund guarantee

    Converts to your local currency at checkout

    0 installsSecurity scanned
    🔐 MCP OAuth & Authorization Contract Preflight

    🔐 MCP OAuth & Authorization Contract Preflight

    Example session with this skill installed

    Set rule_snapshot to MCP-2026-07-28 and spec_status to stable; supply the pinned official source digests, declared implementation_role, metadata documents, registrations, redacted transcripts, and non-empty evidence references.

    • Read your context and instructions
    • Compiled the mcp oauth

    A deterministic READY, REVIEW, BLOCK, or CANNOT_ASSESS result with stable finding codes, a complete review manifest, a human-readable report, and a SHA-256 receipt.

    Connects securely to your tools. The creator never sees your data.

    What you get

    Preflight an MCP 401 discovery exchangeCheck PKCE and resource-indicator evidenceBlock token passthrough and wrong-audience acceptance evidence

    About this skill

    MCP OAuth & Authorization Contract Preflight turns owner-supplied, redacted OAuth evidence into a deterministic local migration gate for the stable MCP 2026-07-28 profile. It checks protected-resource and authorization-server metadata alignment, exact issuer discovery, DCR application_type and issuer-bound registration, PKCE, resource indicators, token audience, step-up scope union, refresh guidance, evidence references, and declared client/server role coverage. The bundled Python helper writes stable findings, a complete review manifest, JSON and Markdown reports, and a SHA-256 receipt. It runs offline, handles no live token or credential, and returns CANNOT_ASSESS when role-relevant evidence is incomplete. READY does not prove interoperability, authorize deployment, or provide a security certification.

    How to install

    Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

    ~30 seconds
    1. 1

      Download the ZIP

      Free skills download straight away. Paid skills unlock right after purchase.

    2. 2

      Unzip into your skills folder

      Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.

    3. 3

      Ask your agent to use it

      Restart the agent if it was already running. It picks the skill up automatically - no config needed.

    Skills folder by agent

    Click the path to copy it. Create the folder if it does not exist yet.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 1 month ago

    • Passed all security checks, Safe to install

    Listed1 month ago
    Updated1 month ago

    What's inside

    Frequently Asked Questions