Ledger
Every status change on record
Newest first. Nothing in it is ever edited or removed.
- Status changes
- 124
- Cells that changed
- 102
- Days with a change
- 7
NeonClient ID Metadata Documents supported
→Supported
Passive scan · observed 4 times · source
HTTP 200; client_id_metadata_document_supported: true
3 earlier observations
- · Unsupported · Passive scan
- · Unsupported · Passive scan
- · Unsupported · Passive scan
NeonIssuer identifier in authorization responses
→Supported
Passive scan · observed 4 times · source
HTTP 200; authorization_response_iss_parameter_supported: true
3 earlier observations
- · Unsupported · Passive scan
- · Unsupported · Passive scan
- · Unsupported · Passive scan
VercelClient ID Metadata Documents supported
→Supported
Passive scan · observed 4 times · source
HTTP 200; client_id_metadata_document_supported: true
3 earlier observations
- · Unsupported · Passive scan
- · Unsupported · Passive scan
- · Unsupported · Passive scan
BoxMetadata issuer matches the discovery URL
→Unsupported
Passive scan · observed 3 times · source
HTTP 200; issuer: https://api.box.com, PRM named https://api.box.com/
2 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
BoxPRM reachable at a well-known URI
→Unsupported
Passive scan · observed 4 times · source
HTTP 200; not at either well-known location (root HTTP 200, root HTTP 200)
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Vendor claim
BuildkiteNo offline_access in advertised scopes
→Unknown
Passive scan · observed 3 times · source
HTTP 200; scopes_supported: absent, so no scope is advertised to judge
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
HubSpot11 cells changed in one run
10 1
11 cells
- Client ID Metadata Documents supported, was unsupported
- Dynamic Client Registration offered, was unsupported
- All endpoints served over HTTPS, was supported
- Issuer identifier in authorization responses, was unsupported
- Metadata issuer matches the discovery URL, was supported
- Authorization server metadata discoverable, was supported
- PKCE with S256 advertised, was supported
- Protected Resource Metadata served, was supported
- PRM lists an authorization server, was supported
- No offline_access in advertised scopes, was supported
- PRM lists scopes_supported, was unsupported
MiroPRM reachable at a well-known URI
→Unsupported
Passive scan · observed 3 times · source
HTTP 200; not at either well-known location (root HTTP 200, root HTTP 200)
2 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
monday.com11 cells changed in one run
9 2
11 cells
- Client ID Metadata Documents supported, was supported
- Dynamic Client Registration offered, was supported
- All endpoints served over HTTPS, was supported
- Issuer identifier in authorization responses, was supported
- Metadata issuer matches the discovery URL, was supported
- Authorization server metadata discoverable, was supported
- PKCE with S256 advertised, was supported
- Protected Resource Metadata served, was supported
- PRM lists an authorization server, was supported
- PRM lists scopes_supported, was unsupported
- PRM reachable at a well-known URI, was supported
NeonNo offline_access in advertised scopes
→Unknown
Passive scan · observed 3 times · source
HTTP 200; scopes_supported: absent, so no scope is advertised to judge
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
VercelPRM reachable at a well-known URI
→Unsupported
Passive scan · observed 3 times · source
HTTP 200; not at either well-known location (root HTTP 200, root HTTP 200)
2 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
HubSpot14 cells changed in one run
6 8
14 cells
- Client ID Metadata Documents supported, was not applicable
- Dynamic Client Registration offered, was not applicable
- All endpoints served over HTTPS, was not applicable
- Issuer identifier in authorization responses, was not applicable
- Metadata issuer matches the discovery URL, was not applicable
- Authorization server metadata discoverable, was not applicable
- PKCE with S256 advertised, was not applicable
- Protected Resource Metadata served, was not applicable
- PRM lists an authorization server, was not applicable
- No offline_access in advertised scopes, was not applicable
- PRM lists scopes_supported, was not applicable
- PRM reachable at a well-known URI, was not applicable
- resource_metadata in the 401 challenge, was not applicable
- Scope in the WWW-Authenticate challenge, was not applicable
Zapier14 cells changed in one run
4 10
14 cells
- Client ID Metadata Documents supported, was not applicable
- Dynamic Client Registration offered, was not applicable
- All endpoints served over HTTPS, was not applicable
- Issuer identifier in authorization responses, was not applicable
- Metadata issuer matches the discovery URL, was not applicable
- Authorization server metadata discoverable, was not applicable
- PKCE with S256 advertised, was not applicable
- Protected Resource Metadata served, was not applicable
- PRM lists an authorization server, was not applicable
- No offline_access in advertised scopes, was not applicable
- PRM lists scopes_supported, was not applicable
- PRM reachable at a well-known URI, was not applicable
- resource_metadata in the 401 challenge, was not applicable
- Scope in the WWW-Authenticate challenge, was not applicable
Airtableresource_metadata in the 401 challenge
→Supported
Passive scan · observed 3 times · source
HTTP 401; WWW-Authenticate resource_metadata: https://mcp.airtable.com/.well-known/oauth-protected-resource
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
Atlassian13 cells changed in one run
11 2
13 cells
- Client ID Metadata Documents supported, was unknown
- Dynamic Client Registration offered, was unknown
- All endpoints served over HTTPS, was unknown
- Issuer identifier in authorization responses, was unknown
- Metadata issuer matches the discovery URL, was unknown
- Authorization server metadata discoverable, was unknown
- PKCE with S256 advertised, was unknown
- Protected Resource Metadata served, was unknown
- PRM lists an authorization server, was unknown
- No offline_access in advertised scopes, was unknown
- PRM lists scopes_supported, was unknown
- PRM reachable at a well-known URI, was unsupported
- resource_metadata in the 401 challenge, was unsupported
Attioresource_metadata in the 401 challenge
→Supported
Passive scan · observed 3 times · source
HTTP 401; WWW-Authenticate resource_metadata: https://mcp.attio.com/.well-known/oauth-protected-resource
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
BuildkiteNo offline_access in advertised scopes
→Supported
Passive scan · observed 3 times · source
HTTP 200; the authorization server's scopes_supported has no offline_access: [read, write]; the server advertises no scopes of its own
2 earlier observations
- · Unknown · Passive scan
- · Unknown · Passive scan
Cloudflare Workersresource_metadata in the 401 challenge
→Supported
Passive scan · observed 3 times · source
HTTP 401; WWW-Authenticate resource_metadata: https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
FigmaDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://api.figma.com/v1/oauth/mcp/register
4 earlier observations
- · Supported · Passive scan
- · Partial · Manual check
- · Supported · Passive scan
- · Unsupported · Vendor claim
Linearresource_metadata in the 401 challenge
→Supported
Passive scan · observed 3 times · source
HTTP 401; WWW-Authenticate resource_metadata: https://mcp.linear.app/.well-known/oauth-protected-resource/mcp
2 earlier observations
- · Supported · Passive scan
- · Unknown · Passive scan
NeonNo offline_access in advertised scopes
→Supported
Passive scan · observed 3 times · source
HTTP 200; the authorization server's scopes_supported has no offline_access: [read, write]; the server advertises no scopes of its own
2 earlier observations
- · Unknown · Passive scan
- · Unknown · Passive scan
Sentry3 cells changed in one run
3
3 cells
- No offline_access in advertised scopes, was unknown
- PRM lists scopes_supported, was unsupported
- resource_metadata in the 401 challenge, was unknown
Stack Overflowresource_metadata in the 401 challenge
→Unsupported
Passive scan · observed 3 times · source
HTTP 401; WWW-Authenticate: Bearer, no resource_metadata parameter
2 earlier observations
- · Unsupported · Passive scan
- · Unknown · Passive scan
Zoomresource_metadata in the 401 challenge
→Supported
Passive scan · observed 4 times · source
HTTP 401; WWW-Authenticate resource_metadata: https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Passive scan
FigmaDynamic Client Registration offered
→Partial
Manual check · observed 5 times · source
Figma staff (2026-04-02): the mcp:connect scope is not available to general third-party OAuth apps, MCP access is limited to supported clie…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unsupported · Vendor claim
FigmaDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://api.figma.com/v1/oauth/mcp/register
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Manual check
- · Unsupported · Vendor claim
AsanaDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://mcp.asana.com/register
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unsupported · Vendor claim
- · Unknown · Vendor claim
AtlassianDynamic Client Registration offered
→Unknown
Passive scan · observed 4 times · source
HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge wi…
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unsupported · Vendor claim
AttioDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://app.attio.com/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
BuildkiteDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.buildkite.com/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
CanvaDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://mcp.canva.com/register
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
- · Unknown · Vendor claim
ClickUpPKCE with S256 advertised
→Supported
Passive scan · observed 4 times · source
HTTP 200; code_challenge_methods_supported: [S256]
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
Cloudflare WorkersDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://bindings.mcp.cloudflare.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
CloudinaryDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://asset-management.mcp.cloudinary.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
GitHubPKCE with S256 advertised
→Supported
Passive scan · observed 4 times · source
HTTP 200; code_challenge_methods_supported: [S256]
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
IntercomDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://mcp.intercom.com/register
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
- · Unknown · Vendor claim
MiroDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.miro.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
monday.comPKCE with S256 advertised
→Supported
Passive scan · observed 4 times · source
HTTP 200; code_challenge_methods_supported: [S256]
3 earlier observations
- · Unknown · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
NeonDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.neon.tech/api/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
NetlifyDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://netlify-mcp.netlify.app/oauth-server/reg
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
NotionPKCE with S256 advertised
→Supported
Passive scan · observed 4 times · source
HTTP 200; code_challenge_methods_supported: [S256]
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unsupported · Vendor claim
PayPalDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.paypal.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
PlaidDynamic Client Registration offered
→Unknown
Passive scan · observed 4 times · source
HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge wi…
3 earlier observations
- · Unknown · Passive scan
- · Unknown · Passive scan
- · Unsupported · Vendor claim
Prisma PostgresDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://auth.prisma.io/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
RampDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://ramp-mcp-remote.ramp.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
SentryDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.sentry.dev/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
SquareDynamic Client Registration offered
→Supported
Passive scan · observed 5 times · source
HTTP 200; registration_endpoint: https://mcp.squareup.com/register
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
- · Unknown · Vendor claim
StripeDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://access.stripe.com/mcp/oauth2/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
TodoistDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://todoist.com/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
VercelDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://api.vercel.com/login/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
WebflowDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.webflow.com/oauth/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
WixDynamic Client Registration offered
→Supported
Passive scan · observed 4 times · source
HTTP 200; registration_endpoint: https://mcp.wix.com/register
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
→Supported
Passive scan · observed 4 times · source
HTTP 200; code_challenge_methods_supported: [S256]
3 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Partial · Vendor claim
AirtableDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"Our server supports Dynamic Client Registration (DCR)."
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
AsanaDynamic Client Registration offered
→Unsupported
Vendor claim · observed 5 times · source
"Dynamic client registration is not supported with Asana’s V2 MCP Server."
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
CanvaDynamic Client Registration offered
→Partial
Vendor claim · observed 5 times · source
"Dynamic Client Registration (DCR) is deprecated in favor of CIMD, but it remains available for backward compatibility." (Deprecated; still…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
ClickUpDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"For Authentication, select OAuth. Ensure the configuration is set to Dynamic Discovery (DCR)." (Only stated as a Microsoft Copilot Studio…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unsupported · Vendor claim
IntercomDynamic Client Registration offered
→Partial
Vendor claim · observed 5 times · source
"OAuth client registration is automatic — the server supports Dynamic Client Registration. However, every redirect URI a client registers i…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
LinearDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"The interactive setup flow uses OAuth 2.1 with dynamic client registration."
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
monday.comDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"Instead, they authenticate through OAuth 2.0 Dynamic Client Registration" (Registration endpoint listed as https://mcp.monday.com/register…
4 earlier observations
- · Unknown · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
NotionDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"Notion MCP server supports dynamic client registration (RFC 7591)." (Guide tells clients to persist client_id and client_secret 'because r…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
SquareDynamic Client Registration offered
→Partial
Vendor claim · observed 5 times · source
"Square maintains an allowlist of MCP clients in order to protect against malicious client registration attempts." (Docs speak of client re…
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
SupabaseDynamic Client Registration offered
→Supported
Vendor claim · observed 5 times · source
"By default the hosted Supabase MCP server uses dynamic client registration to authenticate with your Supabase org."
4 earlier observations
- · Supported · Passive scan
- · Supported · Passive scan
- · Supported · Passive scan
- · Unknown · Vendor claim
ZoomDynamic Client Registration offered
→Unsupported
Vendor claim · observed 5 times · source
"Zoom remote MCP servers only support manual client registration through app creation and do not support other client registration methods…
4 earlier observations
- · Unsupported · Passive scan
- · Unsupported · Passive scan
- · Unsupported · Passive scan
- · Unknown · Vendor claim