///// Checks / Connectability
MCP OAuth metadata
Whether your authorization server publishes its metadata (RFC 8414) with the endpoints a host needs.
- Check id
mcp-oauth-metadata- Pillar
- Connectability
- Runs in
- The free CLI
- Scoring
- Always counted when there is an MCP server
- Status
- Pre-release, in calibration
Why it matters
The host reads it to find the authorization, token and registration endpoints. Missing or wrong, sign-in stops here.
How to pass
Serve /.well-known/oauth-authorization-server with issuer, authorization_endpoint, token_endpoint and registration_endpoint.
Run it
Find mcp-oauth-metadata in the report. Add --md for a fix prompt you can paste into Claude Code, Codex or Cursor.