# MCP OAuth Discovery Tester

Follow the discovery half of MCP sign-in: the 401 challenge, protected-resource metadata and authorization-server metadata.

```sh
npx backwatch your-site.com --pillar connectability
```

## What it checks

- [agent-auth-www-authenticate](https://backwatch.dev/checks/agent-auth-www-authenticate.md)
- [oauth-protected-resource](https://backwatch.dev/checks/oauth-protected-resource.md)
- [mcp-oauth-metadata](https://backwatch.dev/checks/mcp-oauth-metadata.md)
- [agent-auth-discovery-metadata](https://backwatch.dev/checks/agent-auth-discovery-metadata.md)

Running it from backwatch.dev opens at launch.