MatrixRecord of · MCP Authorization 2026-07-28

An independent lab for agent authorization

How MCP servers authorize AI agents

Public MCP servers
52
Spec requirements
23

Explore the matrixSee what changedDownload the data

2 cells changed on See the ledger

Filter and group

All shows every requirement at a glance. A group shows its cells, and each cell opens its observation. A server's name opens its page with every requirement.

DiscoveryRegistrationAuthorizationTokensTransportDelegationConsent
Server52 listed, A to Z · nightly scan
issuer-matchMUST
metadataMUST
mcp.prmMUST
authorization-serversMUST
scopes-supportedMAY
well-knownMUST
www-authenticateMUST
cimdSHOULD
dcrMAY
preregistrationSHOULD
iss-paramSHOULD
pkce-s256MUST
insufficient-scopeSHOULD
scope-challengeSHOULD
refresh-rotationMUST
resource-indicatorMUST
no-offline-accessSHOULD
401-on-invalidMUST
audience-validationMUST
bearer-headerMUST
httpsMUST
no-passthroughMUST
consentMUST
Airtable
Amplitude
Apify
Asana
Atlassian
Attio
AWS Knowledge
BigQuery
Box
Buildkite
Calendly
Canva
ClickUp
Cloudflare Workers
Cloudinary
Datadog
DeepWiki
Figma
Fireflies.ai
GitHub
GitLab
Granola
HubSpot
Hugging Face
Intercom
Linear
Microsoft Learn
Miro
Mixpanel
monday.com
Neon
Netlify
Notion
PayPal
Plaid
PostHog
Postman
Prisma Postgres
Ramp
Sentry
Slack
Square
Stack Overflow
Stripe
Stytch
Supabase
Todoist
Vercel
Webflow
Wix
Zapier
Zoom
  • Supported
  • Partial
  • Unsupported
  • Unknown
  • Not applicable
  • Unknown no observation

52 of 52 servers, 23 of 23 features

Revision 2026-07-28 currentEarlier: 2025-11-25What changed since 2025-11-25

MUST, SHOULD and MAY are the requirement levels the revision puts on the feature. RS and AS name the party the feature is observed on. The nightly scanner reads 14 of these requirements from public metadata; the trace marknext to a server's name opens what it asked. Rows are alphabetical. Nothing here is scored or ranked.

Access
public · closed · unknown: who can connect, as the server page's evidence says.
Auth
oauth · api key · no authentication · unknown: how the endpoint authenticates clients. A faint mark after a server's name is a class nobody has stated yet. Both come from the evidence on the server page. API-key and unauthenticated servers are not scanned.
Servers
52
Requirements
23
Cells observed
779 / 1196
Access
43 public, 4 closed, 5 unknown
Auth
46 oauth, 4 no authentication, 2 unknown

The ledger, since the last run

124 status changes on record

4 scan runs since the last change. No status changed.

  1. NeonClient ID Metadata Documents supported

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; client_id_metadata_document_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  2. NeonIssuer identifier in authorization responses

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; authorization_response_iss_parameter_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  1. VercelClient ID Metadata Documents supported

    →Supported

    Passive scan · observed 4 times · source

    HTTP 200; client_id_metadata_document_supported: true

    3 earlier observations
    1. · Unsupported · Passive scan
    2. · Unsupported · Passive scan
    3. · Unsupported · Passive scan

  1. BoxMetadata issuer matches the discovery URL

    →Unsupported

    Passive scan · observed 3 times · source

    HTTP 200; issuer: https://api.box.com, PRM named https://api.box.com/

    2 earlier observations
    1. · Supported · Passive scan
    2. · Supported · Passive scan

  2. BoxPRM reachable at a well-known URI

    →Unsupported

    Passive scan · observed 4 times · source

    HTTP 200; not at either well-known location (root HTTP 200, root HTTP 200)

    3 earlier observations
    1. · Supported · Passive scan
    2. · Supported · Passive scan
    3. · Supported · Vendor claim

  3. BuildkiteNo offline_access in advertised scopes

    →Unknown

    Passive scan · observed 3 times · source

    HTTP 200; scopes_supported: absent, so no scope is advertised to judge

    2 earlier observations
    1. · Supported · Passive scan
    2. · Unknown · Passive scan

Open the ledger: all 124 status changes