Oauth Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 380 installs a week from npm. Last commit 11 Oct 2026.
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Today is the operative word: we check Oauth Auditor every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add oauth-auditor -- npx -y @guardbee/mcp-oauth-auditor
{
"mcpServers": {
"oauth-auditor": {
"args": [
"-y",
"@guardbee/mcp-oauth-auditor"
],
"command": "npx"
}
}
}
[mcp_servers.oauth-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-oauth-auditor"]
{
"mcpServers": {
"oauth-auditor": {
"args": [
"-y",
"@guardbee/mcp-oauth-auditor"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"oauth-auditor": {
"args": [
"-y",
"@guardbee/mcp-oauth-auditor"
],
"command": "npx"
}
}
}
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Codebase Q&A for Claude Code through Gemini's 1M-token window, with workspace scans and caching.
MCP server for code structure analysis using tree-sitter.
Secure MCP runtime server for scanning and autofixing code issues
Semantic code graph MCP server for coding agents
MCP server for code structure analysis using tree-sitter.
Anthropic Claude Fable 5 MCP server — top-tier planning and code critique for handoff
MCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review
Answers built from our own checks of this server.