MCP auth atlas

Who supports what in MCP Authorization

Every public MCP server we list, against every requirement the specification puts on servers and their authorization servers. Each cell cites an observation; nothing here is inferred from silence.

Revision2026-07-28currentpublished 2026-07-28 · MCP Authorization 2026-07-28 · About this specification

Supported
Partial
Unsupported
Unknown
Not applicable

MUST, SHOULD and MAY are the requirement levels the revision puts on the feature. RS and AS name the party the feature is observed on. Rows are alphabetical and nothing here ranks servers.

Support for each feature of MCP Authorization 2026-07-28 by server. Rows are servers in alphabetical order; columns are features grouped by category.
Server	issuer-matchMetadata issuer matches the discovery URLMUST	metadataAuthorization server metadata discoverableMUST	mcp.prmProtected Resource Metadata servedMUST	authorization-serversPRM lists an authorization serverMUST	scopes-supportedPRM lists scopes_supportedMAY	well-knownPRM reachable at a well-known URIMUST	www-authenticateresource_metadata in the 401 challengeMUST	cimdClient ID Metadata Documents supportedSHOULD	dcrDynamic Client Registration offeredMAYchanged	preregistrationDocumented pre-registration pathSHOULD	iss-paramIssuer identifier in authorization responsesSHOULDnew	pkce-s256PKCE with S256 advertisedMUST	insufficient-scope403 insufficient_scope for step-upSHOULD	scope-challengeScope in the WWW-Authenticate challengeSHOULD	refresh-rotationRefresh token rotation for public clientsMUST	resource-indicatorResource indicators honouredMUST	no-offline-accessNo offline_access in advertised scopesSHOULDnew	401-on-invalid401 for missing or invalid tokensMUST	audience-validationAudience validationMUST	bearer-headerBearer token only in the Authorization headerMUST	httpsAll endpoints served over HTTPSMUST	no-passthroughNo token passthrough to upstream APIsMUST	consentPer-client consent on proxy serversMUST
	Discovery							Registration			Authorization				Tokens						Transport	Delegation	Consent
Airtableoauth2.1	Unknown Airtable Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Airtable Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://airtable.com/developers/agents/mcp/getting-started — "Our server supports Dynamic Client Registration (DCR)." Revision 2026-07-28	Supported Airtable Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://airtable.com/developers/agents/mcp/other — "Some organizations want all users to authenticate through a single, allow-listable OAuth client instead of DCR. [...] Enter its OAuth client ID in your client's config file." (Client is registered through Airtable's OAuth integration setup with the redirect URI the MCP client requires; client secret optional.) Revision 2026-07-28	Unknown Airtable Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Airtable PKCE with S256 advertised Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://airtable.com/developers/web/api/oauth-reference — "code_challenge_method: The string "S256". [...] S256 was not passed as code_challenge_method (listed as an invalid_grant cause)." (Stated in Airtable's general OAuth reference for the authorization server the MCP server uses, not on an MCP-specific page.) Revision 2026-07-28	Unknown Airtable 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Airtable Refresh token rotation for public clients Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://airtable.com/developers/web/api/oauth-reference — "the previous access and refresh tokens are invalidated and new tokens are returned." (Stated in Airtable's general OAuth reference; refresh tokens valid 60 days, access tokens 60 minutes.) Revision 2026-07-28	Unknown Airtable Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Airtable Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Asanaoauth2.1	Unknown Asana Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Asana Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "Points to Asana's authorization server metadata at https://app.asana.com/.well-known/oauth-authorization-server" Revision 2026-07-28	Supported Asana Protected Resource Metadata served Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "https://mcp.asana.com/v2/.well-known/oauth-protected-resource" (Documented as the protected resource metadata document for the Asana MCP server; a second one is documented for the Command MCP endpoint.) Revision 2026-07-28	Supported Asana PRM lists an authorization server Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "Points to Asana's authorization server metadata at https://app.asana.com/.well-known/oauth-authorization-server" Revision 2026-07-28	Unknown Asana PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Asana Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "Dynamic client registration is not supported with Asana’s V2 MCP Server." Revision 2026-07-28	Supported Asana Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "Although these documents can be used to dynamically discover endpoints, clients must still pre-register to get a client id and client secret as described above." (App is created in the Asana developer console with app type 'MCP app'; tokens issued for MCP apps only work with the MCP server.) Revision 2026-07-28	Unknown Asana Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Asana PKCE with S256 advertised Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/oauth — "The code_challenge_method should be the string "S256" to tell Asana we hashed with SHA256." (From Asana's general OAuth documentation for the same authorization server; the MCP page's example authorization URL also carries code_challenge_method=S256.) Revision 2026-07-28	Unknown Asana 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Asana Resource indicators honoured Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.asana.com/docs/integrating-with-asanas-mcp-server — "When directing users to the authorization endpoint, you can include the resource parameter to specify the MCP server: [...] Tokens issued for MCP apps only work with the MCP server." (Docs describe the resource parameter as optional; values https://mcp.asana.com/v2 or https://mcp.asana.com/v2/command/mcp.) Revision 2026-07-28	Unknown Asana No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Asana Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Atlassianoauth2.1-no-dcr	Unknown Atlassian Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Atlassian Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker). Revision 2026-07-28	Unknown Atlassian Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Atlassian Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Attiooauth2.1	Unknown Attio Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Attio Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Attio Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
AWS Knowledgeopen	Not applicable AWS Knowledge Metadata issuer matches the discovery URL Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Authorization server metadata discoverable Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Protected Resource Metadata served Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge PRM lists an authorization server Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge PRM lists scopes_supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge PRM reachable at a well-known URI Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge resource_metadata in the 401 challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Client ID Metadata Documents supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Dynamic Client Registration offered Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Documented pre-registration path Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Issuer identifier in authorization responses Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge PKCE with S256 advertised Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge 403 insufficient_scope for step-up Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Scope in the WWW-Authenticate challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Refresh token rotation for public clients Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Resource indicators honoured Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge No offline_access in advertised scopes Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge 401 for missing or invalid tokens Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Audience validation Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Bearer token only in the Authorization header Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge All endpoints served over HTTPS Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge No token passthrough to upstream APIs Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable AWS Knowledge Per-client consent on proxy servers Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28
Boxoauth2.1-no-dcr	Unknown Box Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Box Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/box/mcp-server-box-remote/ — "Authorization server metadata: https://api.box.com/.well-known/oauth-authorization-server" Revision 2026-07-28	Supported Box Protected Resource Metadata served Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/box/mcp-server-box-remote/ — "Resource metadata: https://mcp.box.com/.well-known/oauth-protected-resource" Revision 2026-07-28	Unknown Box PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Box PRM reachable at a well-known URI Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/box/mcp-server-box-remote/ — "Resource metadata: https://mcp.box.com/.well-known/oauth-protected-resource" (Root well-known location; the MCP server URL is the host root.) Revision 2026-07-28	Unknown Box resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Box Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker). Revision 2026-07-28	Supported Box Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.box.com/guides/box-mcp/remote/ — "Enter the Redirect URI provided by the external MCP client. [...] Copy the generated Client ID and Client Secret." (Credentials are created under Admin Console > Integrations > Box MCP server > Configure > Add Integration Credentials; the README also allows creating your own OAuth app in the Developer Console.) Revision 2026-07-28	Unknown Box Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Box Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Buildkiteoauth2.1	Unknown Buildkite Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Buildkite Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Buildkite Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Canvaoauth2.1	Unknown Canva Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Canva Client ID Metadata Documents supported Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://www.canva.dev/docs/apps/mcp/access/ — "Your OAuth client_id is an HTTPS URL that points to a JSON document describing your client [...] Many popular AI tools already publish a CIMD document and work out of the box." (Quickstart says CIMD clients without a client secret that are not already recognised join a waitlist and use https://mcp.canva.com/mcp.) Revision 2026-07-28	Partial Canva Dynamic Client Registration offered Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://www.canva.dev/docs/apps/mcp/access/ — "Dynamic Client Registration (DCR) is deprecated in favor of CIMD, but it remains available for backward compatibility." (Deprecated; still offered for backward compatibility.) Revision 2026-07-28	Supported Canva Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://www.canva.dev/docs/apps/quickstart/ — "You get a client ID and client secret straight away, and you manage your own redirect URLs." (App created in the Canva Developer Portal with 'Canva MCP' turned on; such clients use https://api.canva.com/connect/v1/mcp per the quickstart.) Revision 2026-07-28	Unknown Canva Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Canva Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
ClickUpoauth2.1-no-dcr	Unknown ClickUp Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported ClickUp Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server-1 — "For Authentication, select OAuth. Ensure the configuration is set to Dynamic Discovery (DCR)." (Only stated as a Microsoft Copilot Studio configuration instruction; no other page describes a registration endpoint. Contradicts the directory claim oauth2.1-no-dcr.) Revision 2026-07-28	Unknown ClickUp Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial ClickUp PKCE with S256 advertised Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server — "Supports OAuth 2.1 with PKCE authentication." (Docs name PKCE but not the S256 method.) Revision 2026-07-28	Unknown ClickUp 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown ClickUp Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Cloudflare Workersoauth2.1	Unknown Cloudflare Workers Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Cloudflare Workers Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudflare Workers Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Cloudinaryoauth2.1	Unknown Cloudinary Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Cloudinary Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Cloudinary Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
DeepWikiopen	Not applicable DeepWiki Metadata issuer matches the discovery URL Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Authorization server metadata discoverable Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Protected Resource Metadata served Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki PRM lists an authorization server Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki PRM lists scopes_supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki PRM reachable at a well-known URI Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki resource_metadata in the 401 challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Client ID Metadata Documents supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Dynamic Client Registration offered Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Documented pre-registration path Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Issuer identifier in authorization responses Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki PKCE with S256 advertised Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki 403 insufficient_scope for step-up Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Scope in the WWW-Authenticate challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Refresh token rotation for public clients Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Resource indicators honoured Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki No offline_access in advertised scopes Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki 401 for missing or invalid tokens Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Audience validation Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Bearer token only in the Authorization header Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki All endpoints served over HTTPS Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki No token passthrough to upstream APIs Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable DeepWiki Per-client consent on proxy servers Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28
Figmaoauth2.1-no-dcr	Unknown Figma Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Figma Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker). Revision 2026-07-28	Partial Figma Documented pre-registration path Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.figma.com/docs/figma-mcp-server/rate-limits-access/ — "Only clients listed in the Figma MCP Catalog are able to connect to the Figma MCP Server. If you're a developer interested in connecting a new MCP client, you can join the waitlist." (The only documented path for a new client is a waitlist; no self-service way to obtain client credentials is described.) Revision 2026-07-28	Unknown Figma Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Figma Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
GitHuboauth2.1-no-dcr	Unknown GitHub Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported GitHub Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker). Revision 2026-07-28	Supported GitHub Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/github/github-mcp-server — "Each MCP host application needs to configure a GitHub App or OAuth App to support remote access via OAuth. Any host application that supports remote MCP servers should support the remote GitHub server with PAT authentication." (Pre-registration is per host application via a GitHub App or OAuth App; PAT bearer auth is the fallback for unregistered hosts.) Revision 2026-07-28	Unknown GitHub Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial GitHub PKCE with S256 advertised Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/ — "The GitHub MCP Server now supports OAuth 2.1 + PKCE with integration into all first-party Copilot IDEs as well as Cursor, providing a simpler and faster alternative to using personal access tokens (PATs)." (Docs name PKCE but not the S256 method.) Revision 2026-07-28	Unknown GitHub 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown GitHub Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
HubSpotapi-key	Not applicable HubSpot Metadata issuer matches the discovery URL Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Authorization server metadata discoverable Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Protected Resource Metadata served Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot PRM lists an authorization server Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot PRM lists scopes_supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot PRM reachable at a well-known URI Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot resource_metadata in the 401 challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Client ID Metadata Documents supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Dynamic Client Registration offered Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Documented pre-registration path Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Issuer identifier in authorization responses Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot PKCE with S256 advertised Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot 403 insufficient_scope for step-up Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Scope in the WWW-Authenticate challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Refresh token rotation for public clients Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Resource indicators honoured Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot No offline_access in advertised scopes Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot 401 for missing or invalid tokens Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Audience validation Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Bearer token only in the Authorization header Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot All endpoints served over HTTPS Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot No token passthrough to upstream APIs Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable HubSpot Per-client consent on proxy servers Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28
Hugging Faceopen	Not applicable Hugging Face Metadata issuer matches the discovery URL Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Authorization server metadata discoverable Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Protected Resource Metadata served Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face PRM lists an authorization server Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face PRM lists scopes_supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face PRM reachable at a well-known URI Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face resource_metadata in the 401 challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Client ID Metadata Documents supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Dynamic Client Registration offered Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Documented pre-registration path Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Issuer identifier in authorization responses Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face PKCE with S256 advertised Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face 403 insufficient_scope for step-up Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Scope in the WWW-Authenticate challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Refresh token rotation for public clients Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Resource indicators honoured Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face No offline_access in advertised scopes Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face 401 for missing or invalid tokens Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Audience validation Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Bearer token only in the Authorization header Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face All endpoints served over HTTPS Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face No token passthrough to upstream APIs Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Hugging Face Per-client consent on proxy servers Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved. Revision 2026-07-28
Intercomoauth2.1	Unknown Intercom Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Intercom Dynamic Client Registration offered Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.intercom.com/docs/guides/mcp — "OAuth client registration is automatic — the server supports Dynamic Client Registration. However, every redirect URI a client registers is checked against an allowlist, which controls where the server will send authorization responses." (OAuth with a callback on localhost or 127.0.0.1 is allowed on any port; any other callback needs an allowlist entry requested via Intercom Customer Support before the flow will complete.) Revision 2026-07-28	Unknown Intercom Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Intercom No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Intercom Per-client consent on proxy servers Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.intercom.com/docs/guides/mcp — "This names the application asking to connect, lists what it will be able to do in your workspace, and shows its Client ID and the address it redirects to after you approve. [...] This asks you to authorize access for Intercom MCP, the server, rather than for the application." (Two screens: the Intercom MCP consent page for the dynamically registered client, then Intercom's own authorization screen for the MCP server's upstream client. Docs add that the application name is supplied by the application and not verified by Intercom.) Revision 2026-07-28
Linearoauth2.1	Unknown Linear Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Linear Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://linear.app/docs/mcp — "The interactive setup flow uses OAuth 2.1 with dynamic client registration." Revision 2026-07-28	Unknown Linear Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Linear Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Mirooauth2.1	Unknown Miro Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Miro Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Miro Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
monday.comoauth2.1	Unknown monday.com Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported monday.com Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — "The server publishes its OAuth metadata through standard discovery documents" (Authorization server metadata URL listed as https://mcp.monday.com/.well-known/oauth-authorization-server.) Revision 2026-07-28	Supported monday.com Protected Resource Metadata served Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — "The server publishes its OAuth metadata through standard discovery documents" (Protected resource metadata URL listed as https://mcp.monday.com/.well-known/oauth-protected-resource.) Revision 2026-07-28	Unknown monday.com PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported monday.com PRM reachable at a well-known URI Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — "The server publishes its OAuth metadata through standard discovery documents" (Docs list the root well-known location https://mcp.monday.com/.well-known/oauth-protected-resource for the MCP endpoint https://mcp.monday.com/mcp.) Revision 2026-07-28	Unknown monday.com resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported monday.com Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — "Instead, they authenticate through OAuth 2.0 Dynamic Client Registration" (Registration endpoint listed as https://mcp.monday.com/register. New connections show 'Admin approval required' until an account admin approves the connector and its redirect URIs.) Revision 2026-07-28	Supported monday.com Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/control-mcp-access-with-oauth-app — "Scroll down to the App Credentials section and copy your Client ID and Client Secret" (Create a monday app, enable the 'New OAuth flow' toggle, add callback URL, then 'pass the MCP server URL plus your Client ID and Client Secret into your client's OAuth configuration'.) Revision 2026-07-28	Unknown monday.com Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial monday.com PKCE with S256 advertised Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — "then runs the standard authorization code + PKCE flow." (PKCE is stated; the S256 method is not named in the docs.) Revision 2026-07-28	Unknown monday.com 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown monday.com Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Neonoauth2.1	Unknown Neon Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Neon Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/neondatabase/mcp-server-neon — "`app/.well-known/`: OAuth discovery metadata endpoints" (Stated in the 'Remote Server Architecture' section of the vendor README; the exact well-known path is not named.) Revision 2026-07-28	Unknown Neon Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Neon Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Neon No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Neon Per-client consent on proxy servers Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/neondatabase/mcp-server-neon — "Connect with `https://mcp.neon.tech/mcp` and uncheck Allow writes on the authorization page." (README describes the remote server's own authorization page with editable consent ('For OAuth registration, `x-read-only` is an initial Allow-writes default on editable consent.') and a static upstream client (`CLIENT_ID`, `CLIENT_SECRET`, `UPSTREAM_OAUTH_HOST` env vars).) Revision 2026-07-28
Netlifyoauth2.1	Unknown Netlify Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Netlify Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Netlify Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Notionoauth2.1	Unknown Notion Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Notion Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Use RFC 9470 (protected resource) then RFC 8414 (authorization server)" (Sample fetches `{authServerUrl}/.well-known/oauth-authorization-server`.) Revision 2026-07-28	Supported Notion Protected Resource Metadata served Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Fetch Protected Resource Metadata to find which authorization server(s) protect this resource" (Sample fetches https://mcp.notion.com/mcp/.well-known/oauth-protected-resource.) Revision 2026-07-28	Supported Notion PRM lists an authorization server Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Fetch Protected Resource Metadata to find which authorization server(s) protect this resource" Revision 2026-07-28	Unknown Notion PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Notion PRM reachable at a well-known URI Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Fetch Protected Resource Metadata to find which authorization server(s) protect this resource" (Path-aware location https://mcp.notion.com/mcp/.well-known/oauth-protected-resource is given in the guide's sample.) Revision 2026-07-28	Unknown Notion resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Notion Client ID Metadata Documents supported Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Alternatively, use a Client ID Metadata Document (CIMD), which Notion MCP supports." Revision 2026-07-28	Supported Notion Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Notion MCP server supports dynamic client registration (RFC 7591)." (Guide tells clients to persist client_id and client_secret 'because re-registering orphans prior grants'.) Revision 2026-07-28	Unknown Notion Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Notion PKCE with S256 advertised Unsupported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Server does not advertise S256 PKCE support, but we will use it anyway." (Only the advertisement in metadata is stated to be missing; the guide says 'PKCE is mandatory' and its sample uses code_challenge_method S256.) Revision 2026-07-28	Unknown Notion 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Notion Refresh token rotation for public clients Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.notion.com/guides/mcp/build-mcp-client — "Every refresh rotates the refresh token: the token response returns a new `refresh_token`, and the one you sent is retired." ('A grant keeps at most two refresh tokens valid at once'; reusing a rotated-away refresh token can revoke the entire connection; absolute lifetime 180 days, 30 days inactivity.) Revision 2026-07-28	Unknown Notion Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Notion Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
PayPaloauth2.1	Unknown PayPal Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown PayPal Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown PayPal Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Plaidoauth2.1-no-dcr	Unknown Plaid Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Plaid Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker). Revision 2026-07-28	Unknown Plaid Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Plaid 401 for missing or invalid tokens Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://plaid.com/docs/resources/mcp/ — "Access tokens for the MCP server expire after 15 minutes." (Docs say expired tokens make MCP requests 'fail with a `401` status code or a provider-specific authentication error'; the 401 is stated for direct calls, missing/invalid tokens are not addressed.) Revision 2026-07-28	Unknown Plaid Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Plaid Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Prisma Postgresoauth2.1	Unknown Prisma Postgres Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Prisma Postgres Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Prisma Postgres Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Rampoauth2.1	Unknown Ramp Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Ramp Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Ramp Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Sentryoauth2.1	Unknown Sentry Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Sentry Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Sentry All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Sentry No token passthrough to upstream APIs Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://github.com/getsentry/sentry-mcp/blob/main/README.md — "With `Sentry-Bearer`, the worker does not store, validate, exchange, or refresh the upstream token. It forwards the token through the same Sentry API calls used by OAuth-backed sessions." (Passthrough happens only in the optional Sentry-Bearer mode, where the client supplies an upstream Sentry API token itself; the README states 'Bearer is reserved for MCP OAuth access tokens'. Behaviour of OAuth-backed sessions is not described.) Revision 2026-07-28	Unknown Sentry Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Slackoauth2.1-no-dcr	Unknown Slack Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Slack Authorization server metadata discoverable Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/ai/slack-mcp-server/ — "If your MCP client supports OAuth 2.0 Authorization Server Metadata (RFC 8414) per MCP spec, you can rely on that." (Page lists the metadata URL https://mcp.slack.com/.well-known/oauth-authorization-server.) Revision 2026-07-28	Supported Slack Protected Resource Metadata served Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/ai/slack-mcp-server/ — "https://mcp.slack.com/.well-known/oauth-protected-resource" (The page lists this URL as the protected resource metadata document for the server.) Revision 2026-07-28	Unknown Slack PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Slack PRM reachable at a well-known URI Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/ai/slack-mcp-server/ — "https://mcp.slack.com/.well-known/oauth-protected-resource" (Documented at the root well-known location of the MCP host (server URL is https://mcp.slack.com/mcp).) Revision 2026-07-28	Unknown Slack resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Slack Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/ai/slack-mcp-server/ — "We do not support SSE-based connections or Dynamic Client Registration at this time." Revision 2026-07-28	Supported Slack Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/ai/slack-mcp-server/ — "MCP clients must be backed by a registered Slack app with a fixed app ID and hardcode that app ID. Slack supports confidential OAuth for MCP clients. You'll need to use your app's `client_id` and `client_secret` for Slack OAuth." (Only directory-published (Slack Marketplace) or internal apps may use MCP; unlisted apps are prohibited.) Revision 2026-07-28	Unknown Slack Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Slack PKCE with S256 advertised Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://docs.slack.dev/authentication/using-pkce — "code_challenge_method must be set to S256, as that is the only supported hashing algorithm for now." (The MCP server page states 'Looking to use desktop clients? PKCE support is now available!' and links to this PKCE guide; enabling PKCE marks the Slack app as a public client.) Revision 2026-07-28	Unknown Slack 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Slack Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Squareoauth2.1	Unknown Square Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Square Dynamic Client Registration offered Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developer.squareup.com/docs/mcp — "Square maintains an allowlist of MCP clients in order to protect against malicious client registration attempts." (Docs speak of client registration being restricted to allowlisted clients without naming RFC 7591; Square staff in the developer forum add requested redirect domains to the allowlist (https://developer.squareup.com/forums/t/mcp-allowlist-request-lovable/27684).) Revision 2026-07-28	Unknown Square Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Square Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Stack Overflowoauth2.1	Unknown Stack Overflow Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Stack Overflow Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stack Overflow Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Stripeoauth2.1	Unknown Stripe Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Stripe Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Stripe Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Supabaseoauth2.1	Unknown Supabase Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Supabase Dynamic Client Registration offered Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://supabase.com/docs/guides/ai-tools/mcp — "By default the hosted Supabase MCP server uses dynamic client registration to authenticate with your Supabase org." Revision 2026-07-28	Supported Supabase Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://supabase.com/docs/guides/ai-tools/mcp — "If your MCP client requires an OAuth client ID and secret (e.g. Azure API Center), you can manually create an OAuth app in your Supabase account. [...] After creating the OAuth app, copy the client ID and client secret to your MCP client." (Docs say to grant write access to all scopes: 'In the future, the MCP server will support more fine-grained scopes, but for now all scopes are required.') Revision 2026-07-28	Unknown Supabase Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Supabase Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Todoistoauth2.1	Unknown Todoist Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Todoist Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Todoist Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Verceloauth2.1	Unknown Vercel Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Partial Vercel Documented pre-registration path Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://vercel.com/docs/mcp/vercel-mcp — "To ensure secure access, Vercel MCP only supports AI clients that have been reviewed and approved by Vercel. If you're building an MCP client and want it included in the supported clients list below, submit the client review form." (The documented path is a manual allowlist review, not self-service issuance of client credentials; docs do not say whether approved clients receive credentials or are allowlisted by redirect URI.) Revision 2026-07-28	Unknown Vercel Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Vercel No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Supported Vercel Per-client consent on proxy servers Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://vercel.com/docs/mcp/vercel-mcp — "Vercel MCP protects against confused deputy attacks by requiring explicit user consent for each client connection" (Vercel acts as its own authorization server rather than a proxy; recorded because the per-client consent behaviour is explicitly stated. The blog post also states: 'We maintain an allowlist of approved clients and require an OAuth consent screen on every connection.' (https://vercel.com/blog/introducing-vercel-mcp-connect-vercel-to-your-ai-tools)) Revision 2026-07-28
Webflowoauth2.1	Unknown Webflow Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Webflow Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Webflow Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Wixoauth2.1	Unknown Wix Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Client ID Metadata Documents supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Dynamic Client Registration offered Unknown Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered. Revision 2026-07-28	Unknown Wix Documented pre-registration path Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix PKCE with S256 advertised Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Bearer token only in the Authorization header Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Wix Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.
Zapierapi-key	Not applicable Zapier Metadata issuer matches the discovery URL Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Authorization server metadata discoverable Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Protected Resource Metadata served Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier PRM lists an authorization server Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier PRM lists scopes_supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier PRM reachable at a well-known URI Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier resource_metadata in the 401 challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Client ID Metadata Documents supported Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Dynamic Client Registration offered Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Documented pre-registration path Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Issuer identifier in authorization responses Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier PKCE with S256 advertised Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier 403 insufficient_scope for step-up Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Scope in the WWW-Authenticate challenge Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Refresh token rotation for public clients Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Resource indicators honoured Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier No offline_access in advertised scopes Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier 401 for missing or invalid tokens Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Audience validation Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Bearer token only in the Authorization header Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier All endpoints served over HTTPS Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier No token passthrough to upstream APIs Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28	Not applicable Zapier Per-client consent on proxy servers Not applicable Method vendor-claim Observed 2026-10-13 by jbspeakr Evidence https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved. Revision 2026-07-28
Zoomoauth2.1	Unknown Zoom Metadata issuer matches the discovery URL Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Authorization server metadata discoverable Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Protected Resource Metadata served Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom PRM lists an authorization server Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom PRM lists scopes_supported Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom PRM reachable at a well-known URI Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom resource_metadata in the 401 challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unsupported Zoom Client ID Metadata Documents supported Unsupported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — "Zoom remote MCP servers only support manual client registration through app creation and do not support other client registration methods such as Dynamic Client Registration (DCR) or Client ID Metadata Documents (CIMD)." Revision 2026-07-28	Unsupported Zoom Dynamic Client Registration offered Unsupported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — "Zoom remote MCP servers only support manual client registration through app creation and do not support other client registration methods such as Dynamic Client Registration (DCR) or Client ID Metadata Documents (CIMD)." Revision 2026-07-28	Supported Zoom Documented pre-registration path Supported Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — "Zoom remote MCP servers require manual client registration. [...] Get from your Zoom app's configuration page on the Zoom App Marketplace." (Client developer creates an app in the Zoom App Marketplace, takes the OAuth Client ID and Client Secret from the app's Basic information page, and enters the MCP client's callback in the OAuth redirect URL field (examples given for Claude and ChatGPT).) Revision 2026-07-28	Unknown Zoom Issuer identifier in authorization responses Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Zoom PKCE with S256 advertised Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — "While Zoom uses traditional OAuth 2.0, the MCP specification mandates OAuth 2.1 compliance, so ensure your client includes the required code_verifier (PKCE) during the exchange." (PKCE is stated as required; the S256 challenge method is not named.) Revision 2026-07-28	Unknown Zoom 403 insufficient_scope for step-up Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Scope in the WWW-Authenticate challenge Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Refresh token rotation for public clients Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Resource indicators honoured Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom No offline_access in advertised scopes Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom 401 for missing or invalid tokens Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Audience validation Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Partial Zoom Bearer token only in the Authorization header Partial Method vendor-claim Observed 2026-10-14 by jbspeakr (documentation pass with Claude Code) Evidence https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — "Once you have the access token, your MCP client must include it as a Bearer token in the Authorization header for all requests to the Zoom MCP server." (Docs require the Authorization header; they do not say whether tokens in the query string are rejected.) Revision 2026-07-28	Unknown Zoom All endpoints served over HTTPS Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom No token passthrough to upstream APIs Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.	Unknown Zoom Per-client consent on proxy servers Unknown (no observation) No observation recorded for this server and feature under revision 2026-07-28. Unknown means nobody has looked yet, not that the feature is missing.