MatrixRecord of · MCP Authorization 2026-07-28

An independent lab for agent authorization

How MCP servers authorize AI agents

Public MCP servers
52
Spec requirements
23

Explore the matrixSee what changedDownload the data

2 cells changed on See the ledger

Filter and group

All shows every requirement at a glance. A group shows its cells, and each cell opens its observation. A server's name opens its page with every requirement.

DiscoveryRegistrationAuthorizationTokensTransportDelegationConsent
Server52 listed, A to Z · nightly scan
issuer-matchMUST
metadataMUST
mcp.prmMUST
authorization-serversMUST
scopes-supportedMAY
well-knownMUST
www-authenticateMUST
cimdSHOULD
dcrMAY
preregistrationSHOULD
iss-paramSHOULD
pkce-s256MUST
insufficient-scopeSHOULD
scope-challengeSHOULD
refresh-rotationMUST
resource-indicatorMUST
no-offline-accessSHOULD
401-on-invalidMUST
audience-validationMUST
bearer-headerMUST
httpsMUST
no-passthroughMUST
consentMUST
Airtable
Amplitude
Apify
Asana
Atlassian
Attio
AWS Knowledge
BigQuery
Box
Buildkite
Calendly
Canva
ClickUp
Cloudflare Workers
Cloudinary
Datadog
DeepWiki
Figma
Fireflies.ai
GitHub
GitLab
Granola
HubSpot
Hugging Face
Intercom
Linear
Microsoft Learn
Miro
Mixpanel
monday.com
Neon
Netlify
Notion
PayPal
Plaid
PostHog
Postman
Prisma Postgres
Ramp
Sentry
Slack
Square
Stack Overflow
Stripe
Stytch
Supabase
Todoist
Vercel
Webflow
Wix
Zapier
Zoom
  • Supported
  • Partial
  • Unsupported
  • Unknown
  • Not applicable
  • Unknown no observation

Column heads

MUST · SHOULD · MAY
the level the revision puts on the requirement
RS · AS
the party it is observed on

Access who can connect

  • Public43
  • Closed4
  • Unknown5

Auth how clients authenticate

  • OAuth46
  • API key0
  • No authentication4
  • Unknown2

Rows

  • opens what the nightly scanner asked; it reads 14 requirements from public metadata, on OAuth servers only
  • a faint mark is a class nobody has stated yet
  • Alphabetical; nothing is scored or ranked.

The ledger, since the last run

124 status changes on record

4 scan runs since the last change. 12 servers observed for the first time, no status changed on the others.

  1. NeonClient ID Metadata Documents supported

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; client_id_metadata_document_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  2. NeonIssuer identifier in authorization responses

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; authorization_response_iss_parameter_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  1. VercelClient ID Metadata Documents supported

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; client_id_metadata_document_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  1. BoxMetadata issuer matches the discovery URL

    →Unsupported

    Passive scan · observed 3 times · source

    HTTP 200; issuer: https://api.box.com, PRM named https://api.box.com/

    2 earlier observations
    1. · Supported · Passive scan
    2. · Supported · Passive scan

  2. BoxPRM reachable at a well-known URI

    →Unsupported

    Passive scan · observed 4 times · source

    HTTP 200; not at either well-known location (root HTTP 200, root HTTP 200)

    3 earlier observations
    1. · Supported · Passive scan
    2. · Supported · Passive scan
    3. · Supported · Vendor claim

  3. BuildkiteNo offline_access in advertised scopes

    →Unknown

    Passive scan · observed 3 times · source

    HTTP 200; scopes_supported: absent, so no scope is advertised to judge

    2 earlier observations
    1. · Supported · Passive scan
    2. · Unknown · Passive scan

Open the ledger: all 124 status changes