{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Enigmacker/mcp-authprobe","description":"Active OAuth tests for remote MCP servers you own: tokens, PKCE, redirect_uri, audience, CSRF.","title":"mcp-authprobe","repository":{"url":"https://github.com/Enigmacker/mcp-authprobe","source":"github"},"version":"0.7.0","websiteUrl":"https://github.com/Enigmacker/mcp-authprobe#readme","packages":[{"registryType":"npm","identifier":"mcp-authprobe","version":"0.7.0","transport":{"type":"stdio"},"packageArguments":[{"type":"positional","value":"mcp"}],"environmentVariables":[{"description":"Path to the ownership secret (create it with `mcp-authprobe ownership init <host>`). Without a secret, only discovery runs.","format":"filepath","name":"MCP_AUTHPROBE_SECRET_FILE"},{"description":"Ownership secret, if not read from MCP_AUTHPROBE_SECRET_FILE.","isSecret":true,"name":"MCP_AUTHPROBE_SECRET"},{"description":"Path to a test grant written by `mcp-authprobe login`, for the refresh token checks. It is consumed by a scan.","format":"filepath","name":"MCP_AUTHPROBE_CREDENTIALS_FILE"},{"description":"Set to 1 to allow loopback and private targets (local labs only).","name":"MCP_AUTHPROBE_ALLOW_PRIVATE"},{"description":"Comma-separated lab origins exempt from the ownership proof, e.g. http://127.0.0.1:8080.","name":"MCP_AUTHPROBE_LAB_ORIGINS"},{"description":"Per-request timeout in milliseconds (default 10000).","format":"number","name":"MCP_AUTHPROBE_TIMEOUT_MS"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-11-01T17:56:43.868466Z","publishedAt":"2026-11-01T17:56:43.868466Z","updatedAt":"2026-11-01T17:56:43.868466Z","isLatest":true}}}