More screenshots

    Works with the AI tools you already use

    CClaude CodeCCursorCCodex CLIGGitHub CopilotGGemini CLIVVS CodeWWindsurfMManus+14 more

    🔐 MCP OAuth & Authorization Contract Preflight

    by JustHandled Labs

    1

    Validate supplied MCP OAuth metadata and transcripts for discovery, audience, scopes, PKCE, challenges, and token hazards.

    Secure checkout via Stripe

    0 installsSecurity scanned

    See it in action

    You say

    Set rule_snapshot to MCP-2025-06-18; metadata_documents[] uses document_id, kind, issuer and authorization servers; transcripts[] uses transcript_id, status, challenge, issuer, resource indicator, PKCE, scopes, audience validation, and passthrough evidence.

    Your agent does

    A deterministic READY, REVIEW, or BLOCK result with stable finding codes, a complete review manifest, a human-readable report, and a SHA-256 receipt.

    What you get

    Preflight an MCP 401 discovery exchangeCheck PKCE and resource-indicator evidenceBlock token passthrough and wrong-audience acceptance evidence

    About this skill

    MCP OAuth & Authorization Contract Preflight turns owner-supplied normalized evidence into a deterministic local review gate. MCP server and client teams debug 401 challenges, protected-resource metadata, issuer discovery, resource indicators, PKCE, scopes, and token audience from ad hoc traces. The bundled Python helper writes stable findings, a complete review manifest, JSON and Markdown reports, and a SHA-256 receipt. Applies an explicit MCP-2025-06-18 rule snapshot to supplied metadata and normalized transcripts and blocks token passthrough and missing audience validation. It uses only the Python standard library, makes no network request, changes no account or system, and never treats READY as source proof, certification, a legal or security verdict, a reimbursement promise, or authorization to act.

    How to install

    Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean today

    Listedtoday

    Creator

    JustHandled Labs builds focused agent skills for the work nobody wants to do by hand. Each one is a single repeatable job done well: catching the security and data mistakes that quietly ship, keeping docs and tests honest, gating the commands an agent is about to run, sharpening writing, and handling the founder chores around launches, outreach, and brand setup. Not generic AI productivity. Specific workflows that are easy to run, review, and repeat. Maintained by H.J. Westerfield, with a background in communications, editing, project coordination, customer support, and practical AI systems. Tools for people who want useful automation without theatrical complexity.

    Frequently Asked Questions

    Popular in AI Agents & LLM Ops