{
  "version": 1,
  "generatedAt": "2026-10-19T21:16:21.403Z",
  "license": "CC BY 4.0",
  "source": "https://letsauth.eu/mcp/",
  "spec": {
    "id": "mcp-authorization",
    "name": "MCP Authorization",
    "currentRevision": "2026-07-28",
    "revisions": [
      {
        "id": "2025-11-25",
        "date": "2025-11-25",
        "status": "superseded",
        "url": "https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization",
        "changes": "Makes OAuth Client ID Metadata Documents the recommended client registration method and adds Enterprise-Managed Authorization (ID-JAG) as an extension.\n"
      },
      {
        "id": "2026-07-28",
        "date": "2026-07-28",
        "status": "current",
        "url": "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization",
        "supersedes": "2025-11-25",
        "changes": "Deprecates Dynamic Client Registration in favour of Client ID Metadata Documents, requires RFC 9207 issuer validation on authorization responses, keys stored client credentials by issuer, requires application_type on DCR requests, and removes session identifiers from the transport. Splits the authorization text into separate pages for discovery, client registration and security considerations.\n"
      }
    ]
  },
  "features": [
    {
      "id": "mcp.as.cimd",
      "name": "Client ID Metadata Documents supported",
      "description": "The authorization server accepts an HTTPS URL as client_id and fetches the client's metadata document, advertising client_id_metadata_document_supported: true.\n",
      "category": "registration",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Client ID Metadata Documents",
          "level": "SHOULD",
          "levelNote": "Became the recommended registration method in this revision."
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Client Registration › Client ID Metadata Documents",
          "level": "SHOULD"
        }
      ]
    },
    {
      "id": "mcp.as.dcr",
      "name": "Dynamic Client Registration offered",
      "description": "The authorization server exposes a registration_endpoint (RFC 7591) so clients can register themselves at runtime. A passive scan sees only the advertised endpoint; whether registration is open to any client or limited to an allowlist is a manual observation, recorded as partial when limited.\n",
      "category": "registration",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Dynamic Client Registration",
          "level": "SHOULD"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Client Registration › Dynamic Client Registration",
          "level": "MAY",
          "levelNote": "Deprecated; retained for compatibility with clients that cannot use Client ID Metadata Documents."
        }
      ]
    },
    {
      "id": "mcp.as.https",
      "name": "All endpoints served over HTTPS",
      "description": "Every authorization server endpoint listed in its metadata uses HTTPS.\n",
      "category": "transport",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Communication Security",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Communication Security",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.as.iss-param",
      "name": "Issuer identifier in authorization responses",
      "description": "The authorization server returns the iss parameter on authorization responses (RFC 9207) and advertises authorization_response_iss_parameter_supported: true.\n",
      "category": "authorization",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Authorization Response Validation",
          "level": "SHOULD"
        }
      ]
    },
    {
      "id": "mcp.as.issuer-match",
      "name": "Metadata issuer matches the discovery URL",
      "description": "The issuer value inside the metadata document equals the issuer identifier used to construct the well-known URL, so clients can detect a substituted document.\n",
      "category": "discovery",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Authorization Server Metadata Discovery",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Authorization Server Metadata Discovery",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.as.metadata",
      "name": "Authorization server metadata discoverable",
      "description": "The authorization server publishes metadata via OAuth 2.0 Authorization Server Metadata (RFC 8414) or OpenID Connect Discovery.\n",
      "category": "discovery",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Authorization Server Metadata Discovery",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Authorization Server Metadata Discovery",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.as.pkce-s256",
      "name": "PKCE with S256 advertised",
      "description": "The metadata lists code_challenge_methods_supported including S256, which MCP clients require before they will start an authorization flow.\n",
      "category": "authorization",
      "party": "authorization-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Authorization Code Protection",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Authorization Code Protection",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.as.preregistration",
      "name": "Documented pre-registration path",
      "description": "The provider documents how a client developer obtains pre-registered client credentials when neither CIMD nor DCR is available.\n",
      "category": "registration",
      "party": "authorization-server",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Dynamic Client Registration",
          "level": "SHOULD",
          "levelNote": "Pre-registration was the fallback when DCR was unavailable."
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Client Registration › Pre-registration",
          "level": "SHOULD",
          "levelNote": "Required as a fallback for clients that cannot register dynamically."
        }
      ]
    },
    {
      "id": "mcp.as.refresh-rotation",
      "name": "Refresh token rotation for public clients",
      "description": "Refresh tokens issued to public clients are rotated or sender-constrained as OAuth 2.1 requires.\n",
      "category": "token",
      "party": "authorization-server",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Token Theft",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Token Theft",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.as.resource-indicator",
      "name": "Resource indicators honoured",
      "description": "The authorization server accepts the RFC 8707 resource parameter and binds the audience of issued tokens to the requested MCP server.\n",
      "category": "token",
      "party": "authorization-server",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Token Audience Binding and Validation",
          "level": "MUST",
          "levelNote": "Required for the audience binding that the MCP server must enforce."
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Token Audience Binding and Validation",
          "level": "MUST",
          "levelNote": "Required for the audience binding that the MCP server must enforce."
        }
      ]
    },
    {
      "id": "mcp.client.credentials-keyed-by-issuer",
      "name": "Credentials stored per issuer",
      "description": "The client stores registered client credentials keyed by the authorization server issuer rather than by MCP server URL, so one registration serves every resource behind that issuer.\n",
      "category": "registration",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Client Registration › Credential Storage",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.client.dcr-application-type",
      "name": "application_type on DCR requests",
      "description": "A client that still uses Dynamic Client Registration sends application_type so the authorization server can apply the right redirect URI rules.\n",
      "category": "registration",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Client Registration › Dynamic Client Registration",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.client.iss-compare-no-normalization",
      "name": "Exact iss comparison",
      "description": "The client compares the iss value in the authorization response byte for byte with the expected issuer, without URL normalisation.\n",
      "category": "authorization",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Authorization Response Validation",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.client.pkce",
      "name": "PKCE on every authorization request",
      "description": "The client generates a PKCE verifier and S256 challenge for every authorization request and refuses to proceed when the server does not advertise S256.\n",
      "category": "authorization",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Authorization Code Protection",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Authorization Code Protection",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.client.resource-param",
      "name": "resource parameter on token requests",
      "description": "The client sends the RFC 8707 resource parameter identifying the MCP server on authorization and token requests.\n",
      "category": "token",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Token Audience Binding and Validation",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Token Audience Binding and Validation",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.client.scope-union",
      "name": "Scope union on step-up",
      "description": "When re-authorizing after an insufficient_scope challenge the client requests the union of the scopes it already holds and the newly required ones.\n",
      "category": "authorization",
      "party": "client",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Flow › Scope Challenge Handling",
          "level": "SHOULD"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Scope Challenge Handling",
          "level": "SHOULD"
        }
      ]
    },
    {
      "id": "mcp.prm.authorization-servers",
      "name": "PRM lists an authorization server",
      "description": "The authorization_servers field of the PRM document names at least one authorization server issuer.\n",
      "category": "discovery",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Authorization Server Location",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Authorization Server Location",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.prm.no-offline-access",
      "name": "No offline_access in advertised scopes",
      "description": "The server does not advertise or request the offline_access scope; refresh-token issuance is left to the authorization server's own policy.\n",
      "category": "token",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Refresh Tokens",
          "level": "SHOULD"
        }
      ]
    },
    {
      "id": "mcp.prm.scopes-supported",
      "name": "PRM lists scopes_supported",
      "description": "The PRM document advertises the scopes the server understands, so a client can choose an initial scope set before the first request.\n",
      "category": "discovery",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Flow › Scope Selection Strategy",
          "level": "MAY"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Scope Selection Strategy",
          "level": "MAY"
        }
      ]
    },
    {
      "id": "mcp.prm.well-known",
      "name": "PRM reachable at a well-known URI",
      "description": "The metadata document is served at the path-aware or root well-known location derived from the MCP server URL, so a client can find it without a prior 401.\n",
      "category": "discovery",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Protected Resource Metadata Discovery Requirements",
          "level": "MUST",
          "levelNote": "One of two discovery mechanisms the server must offer."
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Protected Resource Metadata Discovery Requirements",
          "level": "MUST",
          "levelNote": "One of two discovery mechanisms the server must offer."
        }
      ]
    },
    {
      "id": "mcp.prm.www-authenticate",
      "name": "resource_metadata in the 401 challenge",
      "description": "An unauthenticated request receives a 401 whose WWW-Authenticate header carries a resource_metadata parameter pointing at the PRM document.\n",
      "category": "discovery",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Protected Resource Metadata Discovery Requirements",
          "level": "MUST",
          "levelNote": "One of two discovery mechanisms the server must offer."
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Protected Resource Metadata Discovery Requirements",
          "level": "MUST",
          "levelNote": "One of two discovery mechanisms the server must offer."
        }
      ]
    },
    {
      "id": "mcp.prm",
      "name": "Protected Resource Metadata served",
      "description": "The MCP server publishes an OAuth 2.0 Protected Resource Metadata document (RFC 9728) that tells clients which authorization servers protect it.\n",
      "category": "discovery",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Server Discovery › Authorization Server Location",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization Server Discovery › Authorization Server Location",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.proxy.consent",
      "name": "Per-client consent on proxy servers",
      "description": "An MCP server that acts as a proxy with a static upstream client id obtains the user's consent for each dynamically registered client before forwarding.\n",
      "category": "consent",
      "party": "mcp-server",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Confused Deputy Problem",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Confused Deputy Problem",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.rs.401-on-invalid",
      "name": "401 for missing or invalid tokens",
      "description": "Requests without a token, or with an invalid or expired one, receive HTTP 401 Unauthorized.\n",
      "category": "token",
      "party": "mcp-server",
      "observable": "active",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Access Token Usage › Token Handling",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Token Handling",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.rs.audience-validation",
      "name": "Audience validation",
      "description": "The MCP server rejects tokens that were not issued for it, so a token obtained for another resource cannot be replayed against this server.\n",
      "category": "token",
      "party": "mcp-server",
      "observable": "active",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Access Token Privilege Restriction",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Access Token Privilege Restriction",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.rs.bearer-header",
      "name": "Bearer token only in the Authorization header",
      "description": "The MCP server accepts access tokens only in the Authorization: Bearer header and rejects tokens passed in the query string.\n",
      "category": "token",
      "party": "mcp-server",
      "observable": "active",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Access Token Usage › Token Requirements",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Access Token Usage",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.rs.insufficient-scope",
      "name": "403 insufficient_scope for step-up",
      "description": "When a valid token lacks a required scope the server answers 403 with error=\"insufficient_scope\" and the scopes needed, enabling step-up authorization.\n",
      "category": "authorization",
      "party": "mcp-server",
      "observable": "active",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Flow › Scope Challenge Handling",
          "level": "SHOULD"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Scope Challenge Handling",
          "level": "SHOULD"
        }
      ]
    },
    {
      "id": "mcp.rs.no-passthrough",
      "name": "No token passthrough to upstream APIs",
      "description": "The MCP server never forwards the client's access token to upstream APIs; it obtains its own credentials for downstream calls.\n",
      "category": "delegation",
      "party": "mcp-server",
      "observable": "manual",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Security Considerations › Access Token Privilege Restriction",
          "level": "MUST"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Security Considerations › Access Token Privilege Restriction",
          "level": "MUST"
        }
      ]
    },
    {
      "id": "mcp.rs.scope-challenge",
      "name": "Scope in the WWW-Authenticate challenge",
      "description": "The 401 challenge includes a scope parameter naming the scopes a client should request.\n",
      "category": "authorization",
      "party": "mcp-server",
      "observable": "passive",
      "revisions": [
        {
          "spec": "mcp-authorization",
          "revision": "2025-11-25",
          "section": "Authorization Flow › Scope Selection Strategy",
          "level": "SHOULD"
        },
        {
          "spec": "mcp-authorization",
          "revision": "2026-07-28",
          "section": "Authorization › Scope Selection Strategy",
          "level": "SHOULD"
        }
      ]
    }
  ],
  "servers": [
    {
      "id": "airtable",
      "name": "Airtable",
      "url": "https://mcp.airtable.com/mcp",
      "homepage": "https://airtable.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://airtable.com/developers/agents/mcp/getting-started — Any Airtable account connects by OAuth or a personal access token; enterprise admins can optionally block MCP or allowlist client IDs.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://airtable.com/developers/agents/mcp/getting-started — OAuth with dynamic client registration is the recommended path; a personal access token sent as a bearer header is also accepted.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "asana",
      "name": "Asana",
      "url": "https://mcp.asana.com/sse",
      "homepage": "https://asana.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.asana.com/docs/using-asanas-mcp-server — Any Asana user can connect; the v2 server needs an OAuth app pre-registered by self-service in the Asana developer console, and Enterprise+ admins may block clients via app management.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — OAuth 2.0 authorization code with PKCE; no dynamic client registration and no API-key/PAT alternative for the MCP server.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "atlassian",
      "name": "Atlassian",
      "url": "https://mcp.atlassian.com/v2/mcp",
      "homepage": "https://atlassian.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://support.atlassian.com/atlassian-rovo-mcp-server/docs/setting-up-clients/ — Requires only an Atlassian Cloud site with Jira, Compass or Confluence and a browser for the OAuth flow.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.atlassian.com/cloud/rovo-mcp/guides/configuring-oauth-2-1/ — OAuth 2.1 authorization code with user consent is the recommended method; an API token is accepted only if the org admin has enabled it.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "attio",
      "name": "Attio",
      "url": "https://mcp.attio.com/mcp",
      "homepage": "https://attio.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.attio.com/mcp/overview — Any Attio user adds the URL as a custom connector and logs in with their Attio account; no plan or admin step is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.attio.com/mcp/overview — OAuth login as the Attio user with dynamic client registration; the docs state no API keys are required.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "aws-knowledge",
      "name": "AWS Knowledge",
      "vendor": "AWS",
      "url": "https://knowledge-mcp.global.api.aws",
      "homepage": "https://aws.github.io/",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server — Publicly accessible at no cost; the FAQ states no AWS account is needed, subject to rate limits.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "none",
        "method": "manual",
        "evidence": "https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server — The docs state the Knowledge MCP server does not require authentication.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "box",
      "name": "Box",
      "url": "https://mcp.box.com",
      "homepage": "https://box.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "closed",
        "method": "manual",
        "evidence": "https://developer.box.com/guides/box-mcp/setup — A Box admin must enable the Box MCP server integration in the Admin Console and issue integration credentials before any client can connect.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.box.com/guides/box-mcp — OAuth 2.0 authorization code against account.box.com with admin-issued client ID and secret; no dynamic client registration.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "buildkite",
      "name": "Buildkite",
      "url": "https://mcp.buildkite.com/mcp",
      "homepage": "https://buildkite.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://buildkite.com/docs/apis/mcp-server — The remote server is described as available for all users; only a Buildkite user account is needed.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://buildkite.com/docs/apis/mcp-server — Short-lived OAuth access tokens issued by Buildkite; a separate /direct endpoint accepts an API access token as bearer for headless agents.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "canva",
      "name": "Canva",
      "url": "https://mcp.canva.com/mcp",
      "homepage": "https://canva.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://www.canva.dev/docs/apps/mcp/access/ — Each user signs in with their own Canva account; developers register an app in the Developer Portal with no waitlist (the waitlist applies only to CIMD-only clients wanting redirect URIs allowlisted).",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://www.canva.dev/docs/mcp/ — OAuth per user, with Client ID Metadata Documents recommended, dynamic client registration still available and manual client registration possible.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "clickup",
      "name": "ClickUp",
      "url": "https://mcp.clickup.com/mcp",
      "homepage": "https://clickup.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://help.clickup.com/hc/en-us/articles/33335772678423-What-is-ClickUp-MCP — ClickUp MCP is available on all plans including Free Forever, with per-plan daily rate limits.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server — OAuth 2.1 with PKCE only; the FAQ states API keys or own access tokens cannot be used.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "cloudflare-workers",
      "name": "Cloudflare Workers",
      "vendor": "Cloudflare",
      "url": "https://bindings.mcp.cloudflare.com/mcp",
      "homepage": "https://cloudflare.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/ — Cloudflare's managed MCP servers connect with a Cloudflare account via OAuth; no plan or admin gate is documented, but the Workers Bindings server is marked deprecated in favour of mcp.cloudflare.com.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://raw.githubusercontent.com/cloudflare/mcp-server-cloudflare/main/apps/workers-bindings/README.md — Built-in Cloudflare OAuth flow in the browser; the main Cloudflare API server also accepts an API token as bearer, which is not documented for the bindings server.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "cloudinary",
      "name": "Cloudinary",
      "url": "https://asset-management.mcp.cloudinary.com/sse",
      "homepage": "https://cloudinary.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://cloudinary.com/documentation/cloudinary_llm_mcp — Any Cloudinary account connects by logging in and selecting a product environment; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://asset-management.mcp.cloudinary.com/ — OAuth 2.0 is the default when no headers are sent; API key, secret and cloud name can be passed in a cloudinary-url header instead.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "deepwiki",
      "name": "DeepWiki",
      "vendor": "Devin",
      "url": "https://mcp.deepwiki.com/sse",
      "homepage": "https://devin.ai/",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.devin.ai/work-with-devin/deepwiki-mcp — Described as a free, remote, no-authentication-required service for public repositories.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "none",
        "method": "manual",
        "evidence": "https://docs.devin.ai/work-with-devin/deepwiki-mcp — No authentication; private repositories use the separate mcp.devin.ai server with a Devin API key.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "figma",
      "name": "Figma",
      "url": "https://mcp.figma.com/mcp",
      "homepage": "https://figma.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/ — Any Figma account, on any plan including Starter, connects through a client listed in the Figma MCP catalog, with per-seat rate limits; a new client must join a waitlist, which restricts client authors, not the person connecting.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/ — Sign in with the Figma account and click Allow access on first connection; Okta XAA enterprise-managed authorization is available for Claude.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "github",
      "name": "GitHub",
      "url": "https://api.githubcopilot.com/mcp",
      "homepage": "https://github.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.github.com/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server — Any GitHub account can authorize the server; organization admin policies may limit scopes, and EMU enterprises may disable PATs.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.github.com/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server — One-click OAuth is the default; a personal access token sent as a bearer header is also accepted.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "hubspot",
      "name": "HubSpot",
      "url": "https://app.hubspot.com/mcp/v1/http",
      "homepage": "https://hubspot.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server — Any HubSpot account creates an MCP connector self-service under Development > MCP Connectors; the account admin must connect first before other users in the account can.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "unknown",
        "method": "manual",
        "evidence": "https://developers.hubspot.com/docs/build-with-ai/remote-mcp-server — Current vendor docs document only https://mcp.hubspot.com with OAuth 2.1 + PKCE; the listed app.hubspot.com/mcp/v1/http endpoint appears on no HubSpot page found (third-party catalogs call it API-key), so its auth is unsettled.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "hugging-face",
      "name": "Hugging Face",
      "url": "https://hf.co/mcp",
      "homepage": "https://huggingface.co",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://huggingface.co/blog/building-hf-mcp — Anonymous users get a standard tool set; logged-in users get their configured tools and Spaces.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "none",
        "method": "manual",
        "evidence": "https://github.com/huggingface/hf-mcp-server — Token-less requests continue with the anonymous tool set; an HF token as bearer header or OAuth login via ?login are optional.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "intercom",
      "name": "Intercom",
      "url": "https://mcp.intercom.com/sse",
      "homepage": "https://intercom.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.intercom.com/docs/guides/mcp — Available to US- and EU-hosted workspaces (not AU); custom clients with non-localhost redirect URIs need an allowlist entry, but listed clients and localhost work directly.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.intercom.com/docs/guides/mcp — OAuth with consent page and dynamic client registration is recommended; an Intercom API token as bearer is also accepted.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "linear",
      "name": "Linear",
      "url": "https://mcp.linear.app/mcp",
      "homepage": "https://linear.app",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://linear.app/docs/mcp — Any Linear workspace member connects via the interactive OAuth flow; no plan requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://linear.app/docs/mcp — OAuth 2.1 with dynamic client registration; a Linear API key or OAuth access token may instead be passed directly as a bearer header.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "miro",
      "name": "Miro",
      "url": "https://mcp.miro.com/",
      "homepage": "https://miro.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.miro.com/docs/mcp-intro — Any Miro user connects and selects a team; on Enterprise plans the server is disabled by default until an admin enables it.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.miro.com/docs/miro-mcp — OAuth 2.1 with dynamic client registration; no API-key alternative is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "monday-com",
      "name": "monday.com",
      "vendor": "monday MCP",
      "url": "https://mcp.monday.com/sse",
      "homepage": "https://github.com/mondaycom/mcp",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developer.monday.com/api-reference/docs/integrate-with-monday-mcp — Available on all plans; a personal API token path needs no admin approval, pre-approved clients use the hosted MCP permission, and other DCR clients need an account admin to approve the connection.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.monday.com/api-reference/docs/integrate-with-monday-mcp — OAuth 2.0 authorization code (own app or dynamic client registration); a personal API token as bearer is also accepted. Note the listed /sse endpoint is deprecated in favour of /mcp.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "neon",
      "name": "Neon",
      "url": "https://mcp.neon.tech/mcp",
      "homepage": "https://neon.tech",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://neon.com/docs/ai/neon-mcp-server — Any Neon account authorizes through the browser; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://neon.com/docs/ai/neon-mcp-server — Browser-based OAuth by default; a Neon API key as bearer header is also accepted (not on the deprecated /sse endpoint).",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "netlify",
      "name": "Netlify",
      "url": "https://netlify-mcp.netlify.app/mcp",
      "homepage": "https://netlify.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://github.com/netlify/netlify-mcp — Prerequisites are only a Netlify account and an MCP client; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "unknown",
        "method": "manual",
        "evidence": "https://docs.netlify.com/build/build-with-ai/agent-setup-guides/set-up-codex-for-netlify/ — Docs say to authorize Netlify if prompted after adding the remote server but never name the mechanism; the PAT instructions apply to the local npx server only.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "notion",
      "name": "Notion",
      "url": "https://mcp.notion.com/sse",
      "homepage": "https://notion.so",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.notion.com/guides/mcp/get-started-with-mcp — Notion MCP works on every plan for workspace members (guests cannot connect); MCP tokens and enterprise-managed auth are Business/Enterprise extras.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — OAuth 2.0 authorization code with PKCE and dynamic client registration; Business/Enterprise workspace owners can also create a static MCP token sent as bearer.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "paypal",
      "name": "PayPal",
      "url": "https://mcp.paypal.com/sse",
      "homepage": "https://paypal.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developer.paypal.com/ai-tools/mcp-server — Connects with a PayPal account login (sandbox for developer accounts, production for business accounts); no sales or approval step is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.paypal.com/ai-tools/mcp-server — Browser login and consent on first connection, or an OAuth client-credentials access token from the developer dashboard passed as bearer.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "notes": "The vendor's MCP page documents connecting with the account's own REST client ID and secret sent as a bearer token through mcp-remote; it does not describe an OAuth 2.1 user authorization flow for MCP clients.\n"
    },
    {
      "id": "plaid",
      "name": "Plaid",
      "url": "https://api.dashboard.plaid.com/mcp/",
      "homepage": "https://plaid.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "closed",
        "method": "manual",
        "evidence": "https://plaid.com/docs/resources/mcp/ — Works with Production data only; the team must be approved for Production access with at least one Plaid product before using the server.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://plaid.com/docs/resources/mcp/ — OAuth client_credentials token with scope mcp:dashboard from /oauth/token, sent as a bearer header and refreshed every 15 minutes.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "notes": "The vendor's MCP page documents an OAuth 2.0 client_credentials grant with the team's client ID and production secret (scope mcp:dashboard); there is no user consent flow for MCP clients.\n"
    },
    {
      "id": "prisma-postgres",
      "name": "Prisma Postgres",
      "url": "https://mcp.prisma.io/mcp",
      "homepage": "https://www.prisma.io/docs/postgres/integrations/mcp-server#remote-mcp-server",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://www.prisma.io/docs/postgres/integrations/mcp-server — Connects to the Prisma Console workspace you choose; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://www.prisma.io/docs/postgres/integrations/mcp-server — The server authenticates with Prisma Console in the browser on first use with no token in the client config; the page does not use the word OAuth.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "ramp",
      "name": "Ramp",
      "url": "https://ramp-mcp-remote.ramp.com/mcp",
      "homepage": "https://ramp.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "unknown",
        "method": "manual",
        "evidence": "https://docs.ramp.com/developer-api/v1/guides/ramp-mcp-remote — Off-the-shelf clients work out of the box for Ramp users and a demo endpoint serves sample data, but the page does not say whether a Ramp business account is available by self-service; custom clients need their redirect URI allowlisted.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.ramp.com/developer-api/v1/guides/ramp-mcp-remote — Browser OAuth session per business; note the docs now give https://mcp.ramp.com/mcp rather than the listed ramp-mcp-remote.ramp.com URL.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "sentry",
      "name": "Sentry",
      "url": "https://mcp.sentry.dev/mcp",
      "homepage": "https://sentry.io",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.sentry.io/product/sentry-mcp/ — Any MCP-compatible client can connect with a Sentry account; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.sentry.io/product/sentry-mcp/ — All connections use OAuth; a personal access token can instead be sent as a Sentry-Bearer header per the help center.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "slack",
      "name": "Slack",
      "url": "https://mcp.slack.com/mcp",
      "homepage": "https://slack.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "closed",
        "method": "manual",
        "evidence": "https://docs.slack.dev/ai/slack-mcp-server/connect-to-harnesses/ — Requires a registered Slack app with a fixed client ID and a workspace whose admin has approved the MCP integration; unlisted apps cannot use MCP.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.slack.dev/ai/slack-mcp-server — Confidential OAuth with the app's client ID and secret and user consent; no dynamic client registration.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "square",
      "name": "Square",
      "url": "https://mcp.squareup.com/sse",
      "homepage": "https://square.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developer.squareup.com/docs/mcp — Sign in with any Square account and authorize scopes; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developer.squareup.com/docs/mcp — OAuth login with granular scopes and no manual token management; the listed /sse endpoint is still served but /mcp is current.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "stack-overflow",
      "name": "Stack Overflow",
      "vendor": "StackOverflow",
      "url": "https://mcp.stackoverflow.com",
      "homepage": "https://stackoverflow.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://mcp.stackoverflow.com/ — Any Stack Overflow account can authenticate, limited to 100 calls per day per user (contact sales for more).",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://mcp.stackoverflow.com/ — Browser login to Stack Exchange and a consent step authorizing the client; the page describes the flow without naming OAuth.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "stripe",
      "name": "Stripe",
      "url": "https://mcp.stripe.com/",
      "homepage": "https://stripe.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.stripe.com/mcp — Any Stripe user authorizes live accounts or sandboxes on the consent page; Stripe keeps an allowlist of vetted client redirect URIs for new clients.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.stripe.com/mcp — OAuth with consent page and dynamic client registration; an agent API key as bearer header is also accepted.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "notes": "The directory lists both OAuth2.1 & API Key for this server; the atlas records the OAuth claim.\n"
    },
    {
      "id": "supabase",
      "name": "Supabase",
      "url": "https://mcp.supabase.com/mcp",
      "homepage": "https://supabase.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://supabase.com/docs/guides/ai-tools/mcp — Log in to any Supabase account in the browser and grant the client access to an organization; no plan or admin requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://supabase.com/docs/guides/ai-tools/mcp — OAuth with dynamic client registration by default; a scoped personal access token as bearer header is also accepted for CI.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "todoist",
      "name": "Todoist",
      "vendor": "Doist",
      "url": "https://ai.todoist.net/mcp",
      "homepage": "https://todoist.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://www.todoist.com/help/todoist/todoist-and-ai/connect-todoist-to-an-ai-assistant-xMSzFfHng — Any AI assistant can connect and any Todoist account can approve access; no plan requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://www.todoist.com/help/todoist/todoist-and-ai/connect-todoist-to-an-ai-assistant-xMSzFfHng — OAuth consent screen granting the data:read_write scope; no API-key alternative is documented for the MCP server.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "vercel",
      "name": "Vercel",
      "url": "https://mcp.vercel.com/",
      "homepage": "https://vercel.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://vercel.com/docs/agent-resources/vercel-mcp — Any Vercel account connects through an AI client reviewed and approved by Vercel; a new client must submit a review form, which restricts client authors, not the person connecting.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://vercel.com/docs/agent-resources/vercel-mcp — Remote MCP with OAuth and a mandatory consent screen per the MCP Authorization spec.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "webflow",
      "name": "Webflow",
      "url": "https://mcp.webflow.com/sse",
      "homepage": "https://webflow.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://developers.webflow.com/mcp/faqs.md — Site owners and admins of any Webflow workspace can authorize the server; no plan requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://help.webflow.com/hc/en-us/articles/52536616701971-Connect-your-AI-tools-to-the-Webflow-MCP-server — OAuth login page authorizing selected sites and workspaces; the listed /sse endpoint was replaced by /mcp in November 2025.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "wix",
      "name": "Wix",
      "url": "https://mcp.wix.com/sse",
      "homepage": "https://wix.com",
      "transport": "sse",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://www.wix.com/studio/developers/mcp-server — A Wix account is required and you are prompted to create one if needed; no plan requirement is documented.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://dev.wix.com/docs/overview/ai-the-wix-platform/the-wix-mcp — By default the agent authenticates through the Wix account; an API key plus wix-account-id header is also accepted. The listed /sse path is superseded by /mcp.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "zapier",
      "name": "Zapier",
      "url": "https://mcp.zapier.com/api/mcp/mcp",
      "homepage": "https://zapier.com",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "public",
        "method": "manual",
        "evidence": "https://docs.zapier.com/mcp/get-started/quickstart — Prerequisites are a Zapier account and a Streamable HTTP client; tool calls consume tasks from the account's plan.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://docs.zapier.com/mcp/overview/how-connections-work — OAuth sign-in for listed clients; other clients use a per-server connection token as bearer or query parameter. The current endpoint is /api/v1/connect, not the listed /api/mcp/mcp.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    },
    {
      "id": "zoom",
      "name": "Zoom",
      "url": "https://mcp.zoom.us/mcp/zoom/streamable",
      "homepage": "https://zoom.us",
      "transport": "streamable-http",
      "listed": "public-directory",
      "source": "https://github.com/jaw9c/awesome-remote-mcp-servers",
      "access": {
        "class": "closed",
        "method": "manual",
        "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — Needs a Zoom account with admin or developer authorizations, a manually created Marketplace app, product licenses, and a ZoomMate license for this server.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      },
      "auth": {
        "class": "oauth",
        "method": "manual",
        "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — OAuth 2.0 authorization code with PKCE using a pre-registered app's client ID and secret; no DCR or CIMD.",
        "observedAt": "2026-10-17T20:00:00Z",
        "observedBy": "jbspeakr (documentation pass with Claude Code)"
      }
    }
  ],
  "cells": [
    {
      "server": "airtable",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "airtable",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "asana",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "asana",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "atlassian",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "attio",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "attio",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "box",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "box",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "buildkite",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "canva",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "canva",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "clickup",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "cloudinary",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "deepwiki",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "partial",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "figma",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "figma",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "github",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "github",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hubspot",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "hugging-face",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "intercom",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "linear",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "linear",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "miro",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "miro",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "monday-com",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "neon",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "neon",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "netlify",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "notion",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "notion",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "paypal",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "partial",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "plaid",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "ramp",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "sentry",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "partial",
      "derived": false
    },
    {
      "server": "sentry",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "slack",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "slack",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "square",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "square",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "stripe",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "supabase",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "todoist",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "partial",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "vercel",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "webflow",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "wix",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "wix",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zapier",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zapier",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "partial",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "derived": false
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    },
    {
      "server": "zoom",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "unknown",
      "derived": true
    }
  ],
  "observations": [
    {
      "server": "airtable",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "airtable",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://airtable.com/developers/agents/mcp/getting-started — \"Our server supports Dynamic Client Registration (DCR).\""
    },
    {
      "server": "airtable",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://airtable.com/developers/agents/mcp/other — \"Some organizations want all users to authenticate through a single, allow-listable OAuth client instead of DCR. [...] Enter its OAuth client ID in your client's config file.\" (Client is registered through Airtable's OAuth integration setup with the redirect URI the MCP client requires; client secret optional.)"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://airtable.com/developers/web/api/oauth-reference — \"code_challenge_method: The string \"S256\". [...] S256 was not passed as code_challenge_method (listed as an invalid_grant cause).\" (Stated in Airtable's general OAuth reference for the authorization server the MCP server uses, not on an MCP-specific page.)"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://airtable.com/developers/web/api/oauth-reference — \"the previous access and refresh tokens are invalidated and new tokens are returned.\" (Stated in Airtable's general OAuth reference; refresh tokens valid 60 days, access tokens 60 minutes.)"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.airtable.com"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://airtable.com/oauth2/v1]"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [data.records:read, data.records:write, schema.bases:read, schema.bases:write, data.recordComments:read, data.recordComments:write, workspacesAndBases:read]"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/mcp — HTTP 405; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [data.records:read, data.records:write, schema.bases:read, schema.bases:write, data.recordComments:read, data.recordComments:write, workspacesAndBases:read]"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; issuer: https://airtable.com/oauth2/v1 equals the issuer the PRM named"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; issuer: https://airtable.com/oauth2/v1"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; registration_endpoint: https://airtable.com/oauth2/v1/register"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.airtable.com"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://airtable.com/oauth2/v1]"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [data.records:read, data.records:write, schema.bases:read, schema.bases:write, data.recordComments:read, data.recordComments:write, workspacesAndBases:read]"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.airtable.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "airtable",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/mcp — HTTP 401; WWW-Authenticate: Bearer error=\"invalid_token\", error_description=\"Missing Authorization header\", resource_metadata=\"https://mcp.airtable.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "airtable",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.airtable.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [data.records:read, data.records:write, schema.bases:read, schema.bases:write, data.recordComments:read, data.recordComments:write, workspacesAndBases:read]"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; issuer: https://airtable.com/oauth2/v1 equals the issuer the PRM named"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; issuer: https://airtable.com/oauth2/v1"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; registration_endpoint: https://airtable.com/oauth2/v1/register"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "airtable",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1 — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "asana",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "asana",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"Dynamic client registration is not supported with Asana’s V2 MCP Server.\""
    },
    {
      "server": "asana",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"Although these documents can be used to dynamically discover endpoints, clients must still pre-register to get a client id and client secret as described above.\" (App is created in the Asana developer console with app type 'MCP app'; tokens issued for MCP apps only work with the MCP server.)"
    },
    {
      "server": "asana",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"https://mcp.asana.com/v2/.well-known/oauth-protected-resource\" (Documented as the protected resource metadata document for the Asana MCP server; a second one is documented for the Command MCP endpoint.)"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"Points to Asana's authorization server metadata at https://app.asana.com/.well-known/oauth-authorization-server\""
    },
    {
      "server": "asana",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"Points to Asana's authorization server metadata at https://app.asana.com/.well-known/oauth-authorization-server\""
    },
    {
      "server": "asana",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/integrating-with-asanas-mcp-server — \"When directing users to the authorization endpoint, you can include the resource parameter to specify the MCP server: [...] Tokens issued for MCP apps only work with the MCP server.\" (Docs describe the resource parameter as optional; values https://mcp.asana.com/v2 or https://mcp.asana.com/v2/command/mcp.)"
    },
    {
      "server": "asana",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.asana.com/docs/oauth — \"The code_challenge_method should be the string \"S256\" to tell Asana we hashed with SHA256.\" (From Asana's general OAuth documentation for the same authorization server; the MCP page's example authorization URL also carries code_challenge_method=S256.)"
    },
    {
      "server": "asana",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.asana.com"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.asana.com]"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [default]"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.asana.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [default]"
    },
    {
      "server": "asana",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.asana.com equals the issuer the PRM named"
    },
    {
      "server": "asana",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.asana.com"
    },
    {
      "server": "asana",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "asana",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.asana.com/register"
    },
    {
      "server": "asana",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "asana",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "asana",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "asana",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.asana.com"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.asana.com]"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [default]"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.asana.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "asana",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.asana.com/.well-known/oauth-protected-resource\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no scope parameter"
    },
    {
      "server": "asana",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [default]"
    },
    {
      "server": "asana",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.asana.com equals the issuer the PRM named"
    },
    {
      "server": "asana",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.asana.com"
    },
    {
      "server": "asana",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "asana",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.asana.com/register"
    },
    {
      "server": "asana",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "asana",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "asana",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.asana.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (path-aware HTTP 404, root HTTP 404)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/v1/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no resource_metadata parameter"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp — HTTP 200; resource: https://mcp.atlassian.com/v2/mcp"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp — HTTP 200; authorization_servers: [https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3]"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp — HTTP 200; scopes_supported: [read:me, read:account, offline_access, email, read:jira:agent-interface, write:jira:agent-interface, search:jira:agent-interface, delete:jira:agent-interface, manage:jira:agent-interface, read:confl…"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/v2/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp"
    },
    {
      "server": "atlassian",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/v2/mcp — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp\", no scope parameter"
    },
    {
      "server": "atlassian",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp — HTTP 200; scopes_supported includes offline_access: [read:me, read:account, offline_access, email, read:jira:agent-interface, write:jira:agent-interface, search:jira:agent-interface, delete:jira:agent-interface, manage:jira:age…"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; issuer: https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 equals the issuer the PRM named"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; issuer: https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; registration_endpoint: https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3/dcr/register"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "atlassian",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3 — HTTP 200; all 6 endpoints use https"
    },
    {
      "server": "attio",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "attio",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.attio.com/mcp"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://app.attio.com]"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [mcp, offline_access, openid]"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/mcp — HTTP 405; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [mcp, offline_access, openid]"
    },
    {
      "server": "attio",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://app.attio.com equals the issuer the PRM named"
    },
    {
      "server": "attio",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://app.attio.com"
    },
    {
      "server": "attio",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "attio",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://app.attio.com/oauth/register"
    },
    {
      "server": "attio",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "attio",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "attio",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "attio",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.attio.com/mcp"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://app.attio.com]"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [mcp, offline_access, openid]"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.attio.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "attio",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/mcp — HTTP 401; WWW-Authenticate scope: [openid, offline_access, mcp]"
    },
    {
      "server": "attio",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.attio.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [mcp, offline_access, openid]"
    },
    {
      "server": "attio",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://app.attio.com equals the issuer the PRM named"
    },
    {
      "server": "attio",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://app.attio.com"
    },
    {
      "server": "attio",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "attio",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://app.attio.com/oauth/register"
    },
    {
      "server": "attio",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "attio",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "attio",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.attio.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "aws-knowledge",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "box",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "box",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.box.com/guides/box-mcp/remote/ — \"Enter the Redirect URI provided by the external MCP client. [...] Copy the generated Client ID and Client Secret.\" (Credentials are created under Admin Console > Integrations > Box MCP server > Configure > Add Integration Credentials; the README also allows creating your own OAuth app in the Developer Console.)"
    },
    {
      "server": "box",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/box/mcp-server-box-remote/ — \"Resource metadata: https://mcp.box.com/.well-known/oauth-protected-resource\""
    },
    {
      "server": "box",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/box/mcp-server-box-remote/ — \"Resource metadata: https://mcp.box.com/.well-known/oauth-protected-resource\" (Root well-known location; the MCP server URL is the host root.)"
    },
    {
      "server": "box",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/box/mcp-server-box-remote/ — \"Authorization server metadata: https://api.box.com/.well-known/oauth-authorization-server\""
    },
    {
      "server": "box",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.box.com/"
    },
    {
      "server": "box",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://api.box.com/]"
    },
    {
      "server": "box",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "box",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.box.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "box",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "box",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.box.com equals the issuer the PRM named"
    },
    {
      "server": "box",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.box.com"
    },
    {
      "server": "box",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "box",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "box",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.box.com/"
    },
    {
      "server": "box",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://api.box.com/]"
    },
    {
      "server": "box",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "box",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.box.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "box",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/ — HTTP 401; WWW-Authenticate: Bearer realm=\"Service\", error=\"invalid_request\", error_description=\"The access token was not found.\", resource_metadata=\"https://mcp.box.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "box",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.box.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "box",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.box.com equals the issuer the PRM named"
    },
    {
      "server": "box",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.box.com"
    },
    {
      "server": "box",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "box",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "box",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.box.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.buildkite.com/mcp"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.buildkite.com]"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.buildkite.com equals the issuer the PRM named"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.buildkite.com"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.buildkite.com/oauth/register"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.buildkite.com/mcp"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.buildkite.com]"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "buildkite",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"https://mcp.buildkite.com\", error=\"access_denied\", error_description=\"Authentication required\", resource_metadata=\"https://mcp.buildkite.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "buildkite",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; the authorization server's scopes_supported has no offline_access: [read, write]; the server advertises no scopes of its own"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.buildkite.com equals the issuer the PRM named"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.buildkite.com"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.buildkite.com/oauth/register"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "buildkite",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.buildkite.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "canva",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "canva",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://www.canva.dev/docs/apps/mcp/access/ — \"Your OAuth client_id is an HTTPS URL that points to a JSON document describing your client [...] Many popular AI tools already publish a CIMD document and work out of the box.\" (Quickstart says CIMD clients without a client secret that are not already recognised join a waitlist and use https://mcp.canva.com/mcp.)"
    },
    {
      "server": "canva",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://www.canva.dev/docs/apps/mcp/access/ — \"Dynamic Client Registration (DCR) is deprecated in favor of CIMD, but it remains available for backward compatibility.\" (Deprecated; still offered for backward compatibility.)"
    },
    {
      "server": "canva",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://www.canva.dev/docs/apps/quickstart/ — \"You get a client ID and client secret straight away, and you manage your own redirect URLs.\" (App created in the Canva Developer Portal with 'Canva MCP' turned on; such clients use https://api.canva.com/connect/v1/mcp per the quickstart.)"
    },
    {
      "server": "canva",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.canva.com/mcp"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.canva.com]"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [profile:read, design:meta:read, design:content:write, design:content:read, folder:read, folder:write, brandtemplate:content:read, brandtemplate:meta:read, brandtemplate:content:write, comment:write, commen…"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.canva.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [profile:read, design:meta:read, design:content:write, design:content:read, folder:read, folder:write, brandtemplate:content:read, brandtemplate:meta:read, brandtemplate:content:write…"
    },
    {
      "server": "canva",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.canva.com equals the issuer the PRM named"
    },
    {
      "server": "canva",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.canva.com"
    },
    {
      "server": "canva",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "canva",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.canva.com/register"
    },
    {
      "server": "canva",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "canva",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "canva",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "canva",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.canva.com/mcp"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.canva.com]"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [profile:read, design:meta:read, design:content:write, design:content:read, folder:read, folder:write, brandtemplate:content:read, brandtemplate:meta:read, brandtemplate:content:write, comment:write, commen…"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.canva.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "canva",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.canva.com/.well-known/oauth-protected-resource/mcp\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no scope parameter"
    },
    {
      "server": "canva",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [profile:read, design:meta:read, design:content:write, design:content:read, folder:read, folder:write, brandtemplate:content:read, brandtemplate:meta:read, brandtemplate:content:write…"
    },
    {
      "server": "canva",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.canva.com equals the issuer the PRM named"
    },
    {
      "server": "canva",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.canva.com"
    },
    {
      "server": "canva",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "canva",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.canva.com/register"
    },
    {
      "server": "canva",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "canva",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "canva",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.canva.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "clickup",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server — \"Supports OAuth 2.1 with PKCE authentication.\" (Docs name PKCE but not the S256 method.)"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server-1 — \"For Authentication, select OAuth. Ensure the configuration is set to Dynamic Discovery (DCR).\" (Only stated as a Microsoft Copilot Studio configuration instruction; no other page describes a registration endpoint. Contradicts the directory claim oauth2.1-no-dcr.)"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.clickup.com/mcp"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.clickup.com]"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [read, write]"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [read, write]"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.clickup.com equals the issuer the PRM named"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.clickup.com"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.clickup.com/oauth/register"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.clickup.com/mcp"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.clickup.com]"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [read, write]"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "clickup",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"MCP Server\", error=\"invalid_token\", error_description=\"Bearer token required\", resource_metadata=\"https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "clickup",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [read, write]"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.clickup.com equals the issuer the PRM named"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.clickup.com"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.clickup.com/oauth/register"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "clickup",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.clickup.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://bindings.mcp.cloudflare.com/sse"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://bindings.mcp.cloudflare.com]"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/sse — HTTP 410; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://bindings.mcp.cloudflare.com equals the issuer the PRM named"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://bindings.mcp.cloudflare.com"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://bindings.mcp.cloudflare.com/register"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://bindings.mcp.cloudflare.com/mcp"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://bindings.mcp.cloudflare.com]"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://bindings.mcp.cloudflare.com equals the issuer the PRM named"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://bindings.mcp.cloudflare.com"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://bindings.mcp.cloudflare.com/register"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "cloudflare-workers",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://bindings.mcp.cloudflare.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://asset-management.mcp.cloudinary.com/sse"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://asset-management.mcp.cloudinary.com]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [openid, profile, email, offline_access, asset_management, upload, media_generation]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported includes offline_access: [openid, profile, email, offline_access, asset_management, upload, media_generation]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://asset-management.mcp.cloudinary.com equals the issuer the PRM named"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://asset-management.mcp.cloudinary.com"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://asset-management.mcp.cloudinary.com/register"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256, plain]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://asset-management.mcp.cloudinary.com/sse"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://asset-management.mcp.cloudinary.com]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [openid, profile, email, offline_access, asset_management, upload, media_generation]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/sse — HTTP 401; WWW-Authenticate scope: [openid, profile, email, offline_access, asset_management, upload, media_generation]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported includes offline_access: [openid, profile, email, offline_access, asset_management, upload, media_generation]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://asset-management.mcp.cloudinary.com equals the issuer the PRM named"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://asset-management.mcp.cloudinary.com"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://asset-management.mcp.cloudinary.com/register"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256, plain]"
    },
    {
      "server": "cloudinary",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://asset-management.mcp.cloudinary.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "deepwiki",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "figma",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "figma",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.figma.com/docs/figma-mcp-server/rate-limits-access/ — \"Only clients listed in the Figma MCP Catalog are able to connect to the Figma MCP Server. If you're a developer interested in connecting a new MCP client, you can join the waitlist.\" (The only documented path for a new client is a waitlist; no self-service way to obtain client credentials is described.)"
    },
    {
      "server": "figma",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.figma.com/mcp"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://api.figma.com]"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [mcp:connect]"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/mcp — HTTP 405; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [mcp:connect]"
    },
    {
      "server": "figma",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.figma.com equals the issuer the PRM named"
    },
    {
      "server": "figma",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.figma.com"
    },
    {
      "server": "figma",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "figma",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.figma.com/v1/oauth/mcp/register"
    },
    {
      "server": "figma",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "figma",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "figma",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "figma",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "manual",
      "observedAt": "2026-10-16T19:42:46Z",
      "observedBy": "jbspeakr",
      "evidence": "https://forum.figma.com/ask-the-community-7/how-to-access-mcp-oauth-scope-mcp-connect-50630 — Figma staff (2026-04-02): the mcp:connect scope is not available to general third-party OAuth apps, MCP access is limited to supported clients and integrations; users in the thread report HTTP 403 from the advertised registration_endpoint"
    },
    {
      "server": "figma",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.figma.com/mcp"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://api.figma.com]"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [mcp:connect]"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/mcp — HTTP 400; no 401 challenge to an unauthenticated request (GET HTTP 405, POST HTTP 400), nothing to judge"
    },
    {
      "server": "figma",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/mcp — HTTP 400; no 401 challenge to an unauthenticated request (GET HTTP 405, POST HTTP 400), nothing to judge"
    },
    {
      "server": "figma",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.figma.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [mcp:connect]"
    },
    {
      "server": "figma",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.figma.com equals the issuer the PRM named"
    },
    {
      "server": "figma",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.figma.com"
    },
    {
      "server": "figma",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "figma",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.figma.com/v1/oauth/mcp/register"
    },
    {
      "server": "figma",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "figma",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "figma",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.figma.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "github",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "github",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/github/github-mcp-server — \"Each MCP host application needs to configure a GitHub App or OAuth App to support remote access via OAuth. Any host application that supports remote MCP servers should support the remote GitHub server with PAT authentication.\" (Pre-registration is per host application via a GitHub App or OAuth App; PAT bearer auth is the fallback for unregistered hosts.)"
    },
    {
      "server": "github",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.blog/changelog/2025-09-04-remote-github-mcp-server-is-now-generally-available/ — \"The GitHub MCP Server now supports OAuth 2.1 + PKCE with integration into all first-party Copilot IDEs as well as Cursor, providing a simpler and faster alternative to using personal access tokens (PATs).\" (Docs name PKCE but not the S256 method.)"
    },
    {
      "server": "github",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://api.githubcopilot.com/mcp"
    },
    {
      "server": "github",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://github.com/login/oauth]"
    },
    {
      "server": "github",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [repo, read:org, read:user, user:email, read:packages, write:packages, read:project, project, gist, notifications]"
    },
    {
      "server": "github",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "github",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "github",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [repo, read:org, read:user, user:email, read:packages, write:packages, read:project, project, gist, notifications]"
    },
    {
      "server": "github",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; issuer: https://github.com/login/oauth equals the issuer the PRM named"
    },
    {
      "server": "github",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; issuer: https://github.com/login/oauth"
    },
    {
      "server": "github",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "github",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "github",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "github",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "github",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "github",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://api.githubcopilot.com/mcp"
    },
    {
      "server": "github",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://github.com/login/oauth]"
    },
    {
      "server": "github",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [repo, read:org, read:user, user:email, read:packages, write:packages, read:project, project, gist, notifications]"
    },
    {
      "server": "github",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "github",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "github",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/mcp — HTTP 401; WWW-Authenticate: Bearer error=\"invalid_request\", error_description=\"No access token was provided in this request\", resource_metadata=\"https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "github",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.githubcopilot.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [repo, read:org, read:user, user:email, read:packages, write:packages, read:project, project, gist, notifications]"
    },
    {
      "server": "github",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; issuer: https://github.com/login/oauth equals the issuer the PRM named"
    },
    {
      "server": "github",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; issuer: https://github.com/login/oauth"
    },
    {
      "server": "github",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "github",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "github",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "github",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "github",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://github.com/.well-known/oauth-authorization-server/login/oauth — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.hubspot.com"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.hubspot.com]"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: []"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.hubspot.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (path-aware HTTP 404, root HTTP 404, root HTTP 200)"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.hubspot.com/mcp/v1/http — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.hubspot.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "hubspot",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://app.hubspot.com/mcp/v1/http — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.hubspot.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "hubspot",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: []"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.hubspot.com equals the issuer the PRM named"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.hubspot.com"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "hubspot",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.hubspot.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "hugging-face",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as Open; no OAuth authorization server is involved."
    },
    {
      "server": "intercom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "intercom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.intercom.com/docs/guides/mcp — \"OAuth client registration is automatic — the server supports Dynamic Client Registration. However, every redirect URI a client registers is checked against an allowlist, which controls where the server will send authorization responses.\" (OAuth with a callback on localhost or 127.0.0.1 is allowed on any port; any other callback needs an allowlist entry requested via Intercom Customer Support before the flow will complete.)"
    },
    {
      "server": "intercom",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.intercom.com/docs/guides/mcp — \"This names the application asking to connect, lists what it will be able to do in your workspace, and shows its Client ID and the address it redirects to after you approve. [...] This asks you to authorize access for Intercom MCP, the server, rather than for the application.\" (Two screens: the Intercom MCP consent page for the dynamically registered client, then Intercom's own authorization screen for the MCP server's upstream client. Docs add that the application name is supplied by the application and not verified by Intercom.)"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.intercom.com/sse"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.intercom.com]"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [mcp, operator]"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.intercom.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported without offline_access: [mcp, operator]"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.intercom.com equals the issuer the PRM named"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.intercom.com"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.intercom.com/register"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.intercom.com/sse"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.intercom.com]"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [mcp, operator]"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.intercom.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "intercom",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/sse — HTTP 401; WWW-Authenticate scope: [mcp, operator]"
    },
    {
      "server": "intercom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported without offline_access: [mcp, operator]"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.intercom.com equals the issuer the PRM named"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.intercom.com"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.intercom.com/register"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "intercom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.intercom.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "linear",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "linear",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://linear.app/docs/mcp — \"The interactive setup flow uses OAuth 2.1 with dynamic client registration.\""
    },
    {
      "server": "linear",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.linear.app/sse"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.linear.app]"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [read, write]"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/sse — HTTP 404; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported without offline_access: [read, write]"
    },
    {
      "server": "linear",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.linear.app equals the issuer the PRM named"
    },
    {
      "server": "linear",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.linear.app"
    },
    {
      "server": "linear",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "linear",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.linear.app/register"
    },
    {
      "server": "linear",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "linear",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "linear",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "linear",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.linear.app/mcp"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.linear.app]"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [read, write]"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.linear.app/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "linear",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/mcp — HTTP 401; WWW-Authenticate scope: [read, write]"
    },
    {
      "server": "linear",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [read, write]"
    },
    {
      "server": "linear",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.linear.app equals the issuer the PRM named"
    },
    {
      "server": "linear",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.linear.app"
    },
    {
      "server": "linear",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "linear",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.linear.app/register"
    },
    {
      "server": "linear",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "linear",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "linear",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.linear.app/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "miro",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "miro",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.miro.com/"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.miro.com/]"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [boards:read, boards:write, openid, email]"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.miro.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [boards:read, boards:write, openid, email]"
    },
    {
      "server": "miro",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.miro.com/ equals the issuer the PRM named"
    },
    {
      "server": "miro",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.miro.com/"
    },
    {
      "server": "miro",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "miro",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.miro.com/register"
    },
    {
      "server": "miro",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "miro",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "miro",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "miro",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.miro.com/"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.miro.com/]"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [boards:read, boards:write, openid, email]"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.miro.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "miro",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/ — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.miro.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "miro",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [boards:read, boards:write, openid, email]"
    },
    {
      "server": "miro",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.miro.com/ equals the issuer the PRM named"
    },
    {
      "server": "miro",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.miro.com/"
    },
    {
      "server": "miro",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "miro",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.miro.com/register"
    },
    {
      "server": "miro",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "miro",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "miro",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.miro.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — \"Instead, they authenticate through OAuth 2.0 Dynamic Client Registration\" (Registration endpoint listed as https://mcp.monday.com/register. New connections show 'Admin approval required' until an account admin approves the connector and its redirect URIs.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/control-mcp-access-with-oauth-app — \"Scroll down to the App Credentials section and copy your Client ID and Client Secret\" (Create a monday app, enable the 'New OAuth flow' toggle, add callback URL, then 'pass the MCP server URL plus your Client ID and Client Secret into your client's OAuth configuration'.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — \"then runs the standard authorization code + PKCE flow.\" (PKCE is stated; the S256 method is not named in the docs.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — \"The server publishes its OAuth metadata through standard discovery documents\" (Authorization server metadata URL listed as https://mcp.monday.com/.well-known/oauth-authorization-server.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — \"The server publishes its OAuth metadata through standard discovery documents\" (Protected resource metadata URL listed as https://mcp.monday.com/.well-known/oauth-protected-resource.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.monday.com/api-reference/docs/mcp-dynamic-client-registration — \"The server publishes its OAuth metadata through standard discovery documents\" (Docs list the root well-known location https://mcp.monday.com/.well-known/oauth-protected-resource for the MCP endpoint https://mcp.monday.com/mcp.)"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.monday.com/mcp"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://auth.monday.com/mcp]"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/users/sign_in — HTTP 401; WWW-Authenticate: absent, no resource_metadata parameter"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://auth.monday.com/mcp equals the issuer the PRM named"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://auth.monday.com/mcp"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; registration_endpoint: https://auth.monday.com/oauth_ms/oauth/register"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.monday.com/mcp"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://auth.monday.com/mcp]"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/users/sign_in — HTTP 401; WWW-Authenticate: absent, no resource_metadata parameter"
    },
    {
      "server": "monday-com",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/users/sign_in — HTTP 401; WWW-Authenticate: absent, no scope parameter"
    },
    {
      "server": "monday-com",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.monday.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://auth.monday.com/mcp equals the issuer the PRM named"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://auth.monday.com/mcp"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; registration_endpoint: https://auth.monday.com/oauth_ms/oauth/register"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "monday-com",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.monday.com/.well-known/oauth-authorization-server/mcp — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "neon",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "neon",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/neondatabase/mcp-server-neon — \"`app/.well-known/`: OAuth discovery metadata endpoints\" (Stated in the 'Remote Server Architecture' section of the vendor README; the exact well-known path is not named.)"
    },
    {
      "server": "neon",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/neondatabase/mcp-server-neon — \"Connect with `https://mcp.neon.tech/mcp` and uncheck **Allow writes** on the authorization page.\" (README describes the remote server's own authorization page with editable consent ('For OAuth registration, `x-read-only` is an initial Allow-writes default on editable consent.') and a static upstream client (`CLIENT_ID`, `CLIENT_SECRET`, `UPSTREAM_OAUTH_HOST` env vars).)"
    },
    {
      "server": "neon",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.neon.tech/mcp"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.neon.tech]"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "neon",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.neon.tech equals the issuer the PRM named"
    },
    {
      "server": "neon",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.neon.tech"
    },
    {
      "server": "neon",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.neon.tech/api/register"
    },
    {
      "server": "neon",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "neon",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "neon",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.neon.tech/mcp"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.neon.tech]"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "neon",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/mcp — HTTP 401; WWW-Authenticate: Bearer error=\"invalid_token\", error_description=\"No authorization provided\", resource_metadata=\"https://mcp.neon.tech/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "neon",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; the authorization server's scopes_supported has no offline_access: [read, write]; the server advertises no scopes of its own"
    },
    {
      "server": "neon",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.neon.tech equals the issuer the PRM named"
    },
    {
      "server": "neon",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.neon.tech"
    },
    {
      "server": "neon",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.neon.tech/api/register"
    },
    {
      "server": "neon",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "neon",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "neon",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.neon.tech/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "netlify",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://netlify-mcp.netlify.app/mcp"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://netlify-mcp.netlify.app/]"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [offline_access, read, write, claudeai]"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [offline_access, read, write, claudeai]"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://netlify-mcp.netlify.app/ equals the issuer the PRM named"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://netlify-mcp.netlify.app/"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://netlify-mcp.netlify.app/oauth-server/reg"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://netlify-mcp.netlify.app/mcp"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://netlify-mcp.netlify.app/]"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [offline_access, read, write, claudeai]"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "netlify",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"MCP Server\", resource_metadata=\"https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "netlify",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [offline_access, read, write, claudeai]"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://netlify-mcp.netlify.app/ equals the issuer the PRM named"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; issuer: https://netlify-mcp.netlify.app/"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://netlify-mcp.netlify.app/oauth-server/reg"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "netlify",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://netlify-mcp.netlify.app/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "notion",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "notion",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Notion MCP server supports dynamic client registration (RFC 7591).\" (Guide tells clients to persist client_id and client_secret 'because re-registering orphans prior grants'.)"
    },
    {
      "server": "notion",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Alternatively, use a Client ID Metadata Document (CIMD), which Notion MCP supports.\""
    },
    {
      "server": "notion",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Server does not advertise S256 PKCE support, but we will use it anyway.\" (Only the advertisement in metadata is stated to be missing; the guide says 'PKCE is mandatory' and its sample uses code_challenge_method S256.)"
    },
    {
      "server": "notion",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Use RFC 9470 (protected resource) then RFC 8414 (authorization server)\" (Sample fetches `{authServerUrl}/.well-known/oauth-authorization-server`.)"
    },
    {
      "server": "notion",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Fetch Protected Resource Metadata to find which authorization server(s) protect this resource\" (Sample fetches https://mcp.notion.com/mcp/.well-known/oauth-protected-resource.)"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Fetch Protected Resource Metadata to find which authorization server(s) protect this resource\" (Path-aware location https://mcp.notion.com/mcp/.well-known/oauth-protected-resource is given in the guide's sample.)"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Fetch Protected Resource Metadata to find which authorization server(s) protect this resource\""
    },
    {
      "server": "notion",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.notion.com/guides/mcp/build-mcp-client — \"Every refresh rotates the refresh token: the token response returns a new `refresh_token`, and the one you sent is retired.\" ('A grant keeps at most two refresh tokens valid at once'; reusing a rotated-away refresh token can revoke the entire connection; absolute lifetime 180 days, 30 days inactivity.)"
    },
    {
      "server": "notion",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.notion.com/sse"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.notion.com]"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [default]"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.notion.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported without offline_access: [default]"
    },
    {
      "server": "notion",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.notion.com equals the issuer the PRM named"
    },
    {
      "server": "notion",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.notion.com"
    },
    {
      "server": "notion",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "notion",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.notion.com/register"
    },
    {
      "server": "notion",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "notion",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "notion",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "notion",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.notion.com/sse"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.notion.com]"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: [default]"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.notion.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "notion",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/sse — HTTP 401; WWW-Authenticate scope: [default]"
    },
    {
      "server": "notion",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported without offline_access: [default]"
    },
    {
      "server": "notion",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.notion.com equals the issuer the PRM named"
    },
    {
      "server": "notion",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.notion.com"
    },
    {
      "server": "notion",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "notion",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.notion.com/register"
    },
    {
      "server": "notion",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "notion",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "notion",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.notion.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "paypal",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.paypal.com/sse"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.paypal.com]"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.paypal.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.paypal.com equals the issuer the PRM named"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.paypal.com"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.paypal.com/register"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.paypal.com/sse"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.paypal.com]"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.paypal.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "paypal",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.paypal.com/.well-known/oauth-protected-resource/sse\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no scope parameter"
    },
    {
      "server": "paypal",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.paypal.com equals the issuer the PRM named"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.paypal.com"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.paypal.com/register"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "paypal",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.paypal.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://plaid.com/docs/resources/mcp/ — \"Access tokens for the MCP server expire after 15 minutes.\" (Docs say expired tokens make MCP requests 'fail with a `401` status code or a provider-specific authentication error'; the 401 is stated for direct calls, missing/invalid tokens are not addressed.)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (path-aware HTTP 404, root HTTP 404)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/mcp/sse — HTTP 401; WWW-Authenticate: absent, no resource_metadata parameter"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (path-aware HTTP 404, root HTTP 404)"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/mcp/ — HTTP 401; WWW-Authenticate: absent, no resource_metadata parameter"
    },
    {
      "server": "plaid",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/mcp/ — HTTP 401; WWW-Authenticate: absent, no scope parameter"
    },
    {
      "server": "plaid",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "plaid",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.dashboard.plaid.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404, HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.prisma.io/mcp"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://auth.prisma.io]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [workspace:admin, offline_access]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [workspace:admin, offline_access]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; issuer: https://auth.prisma.io equals the issuer the PRM named"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; issuer: https://auth.prisma.io"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://auth.prisma.io/register"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.prisma.io/mcp"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://auth.prisma.io]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [workspace:admin, offline_access]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/mcp — HTTP 401; WWW-Authenticate: Bearer error=\"invalid_token\", error_description=\"Missing Authorization header\", resource_metadata=\"https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.prisma.io/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported includes offline_access: [workspace:admin, offline_access]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; issuer: https://auth.prisma.io equals the issuer the PRM named"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; issuer: https://auth.prisma.io"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://auth.prisma.io/register"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "prisma-postgres",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://auth.prisma.io/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "ramp",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://ramp-mcp-remote.ramp.com/mcp"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://ramp-mcp-remote.ramp.com]"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [bills:read, cards:read, departments:read, entities:read, limits:read, locations:read, memos:read, purchase_orders:read, reimbursements:read, spend_programs:read, transactions:read, users:read, v…"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [bills:read, cards:read, departments:read, entities:read, limits:read, locations:read, memos:read, purchase_orders:read, reimbursements:read, spend_programs:read, transacti…"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://ramp-mcp-remote.ramp.com equals the issuer the PRM named"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://ramp-mcp-remote.ramp.com"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://ramp-mcp-remote.ramp.com/register"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://ramp-mcp-remote.ramp.com/mcp"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://ramp-mcp-remote.ramp.com]"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [bills:read, cards:read, departments:read, entities:read, limits:read, locations:read, memos:read, purchase_orders:read, reimbursements:read, spend_programs:read, transactions:read, users:read, v…"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "ramp",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/mcp — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "ramp",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [bills:read, cards:read, departments:read, entities:read, limits:read, locations:read, memos:read, purchase_orders:read, reimbursements:read, spend_programs:read, transacti…"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://ramp-mcp-remote.ramp.com equals the issuer the PRM named"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://ramp-mcp-remote.ramp.com"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://ramp-mcp-remote.ramp.com/register"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "ramp",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ramp-mcp-remote.ramp.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://github.com/getsentry/sentry-mcp/blob/main/README.md — \"With `Sentry-Bearer`, the worker does not store, validate, exchange, or refresh the upstream token. It forwards the token through the same Sentry API calls used by OAuth-backed sessions.\" (Passthrough happens only in the optional Sentry-Bearer mode, where the client supplies an upstream Sentry API token itself; the README states 'Bearer is reserved for MCP OAuth access tokens'. Behaviour of OAuth-backed sessions is not described.)"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.sentry.dev/sse"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.sentry.dev]"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/sse — HTTP 410; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.sentry.dev equals the issuer the PRM named"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.sentry.dev"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.sentry.dev/oauth/register"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.sentry.dev/mcp"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://mcp.sentry.dev]"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [org:read, project:write, team:write, event:write, alerts:write]"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "sentry",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "sentry",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [org:read, project:write, team:write, event:write, alerts:write]"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.sentry.dev equals the issuer the PRM named"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.sentry.dev"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.sentry.dev/oauth/register"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "sentry",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.sentry.dev/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "slack",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without Dynamic Client Registration (lock marker)."
    },
    {
      "server": "slack",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/ai/slack-mcp-server/ — \"We do not support SSE-based connections or Dynamic Client Registration at this time.\""
    },
    {
      "server": "slack",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/ai/slack-mcp-server/ — \"MCP clients must be backed by a registered Slack app with a fixed app ID and hardcode that app ID. Slack supports confidential OAuth for MCP clients. You'll need to use your app's `client_id` and `client_secret` for Slack OAuth.\" (Only directory-published (Slack Marketplace) or internal apps may use MCP; unlisted apps are prohibited.)"
    },
    {
      "server": "slack",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/ai/slack-mcp-server/ — \"If your MCP client supports OAuth 2.0 Authorization Server Metadata (RFC 8414) per MCP spec, you can rely on that.\" (Page lists the metadata URL https://mcp.slack.com/.well-known/oauth-authorization-server.)"
    },
    {
      "server": "slack",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/ai/slack-mcp-server/ — \"https://mcp.slack.com/.well-known/oauth-protected-resource\" (The page lists this URL as the protected resource metadata document for the server.)"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/ai/slack-mcp-server/ — \"https://mcp.slack.com/.well-known/oauth-protected-resource\" (Documented at the root well-known location of the MCP host (server URL is https://mcp.slack.com/mcp).)"
    },
    {
      "server": "slack",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://docs.slack.dev/authentication/using-pkce — \"code_challenge_method must be set to S256, as that is the only supported hashing algorithm for now.\" (The MCP server page states 'Looking to use desktop clients? PKCE support is now available!' and links to this PKCE guide; enabling PKCE marks the Slack app as a public client.)"
    },
    {
      "server": "slack",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.slack.com"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.slack.com]"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [canvases:read, canvases:write, channels:history, channels:read, channels:write, chat:write, emoji:read, files:read, files:write, groups:history, groups:read, groups:write, im:history, im:read, im:write, lists:…"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.slack.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [canvases:read, canvases:write, channels:history, channels:read, channels:write, chat:write, emoji:read, files:read, files:write, groups:history, groups:read, groups:write, im:history, im…"
    },
    {
      "server": "slack",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.slack.com equals the issuer the PRM named"
    },
    {
      "server": "slack",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.slack.com"
    },
    {
      "server": "slack",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "slack",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; all 2 endpoints use https"
    },
    {
      "server": "slack",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.slack.com"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.slack.com]"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [canvases:read, canvases:write, channels:history, channels:read, channels:write, chat:write, emoji:read, files:read, files:write, groups:history, groups:read, groups:write, im:history, im:read, im:write, lists:…"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.slack.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "slack",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/mcp — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.slack.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "slack",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [canvases:read, canvases:write, channels:history, channels:read, channels:write, chat:write, emoji:read, files:read, files:write, groups:history, groups:read, groups:write, im:history, im…"
    },
    {
      "server": "slack",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.slack.com equals the issuer the PRM named"
    },
    {
      "server": "slack",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.slack.com"
    },
    {
      "server": "slack",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "slack",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "slack",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.slack.com/.well-known/oauth-authorization-server — HTTP 200; all 2 endpoints use https"
    },
    {
      "server": "square",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "square",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developer.squareup.com/docs/mcp — \"Square maintains an allowlist of MCP clients in order to protect against malicious client registration attempts.\" (Docs speak of client registration being restricted to allowlisted clients without naming RFC 7591; Square staff in the developer forum add requested redirect domains to the allowlist (https://developer.squareup.com/forums/t/mcp-allowlist-request-lovable/27684).)"
    },
    {
      "server": "square",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.squareup.com/sse"
    },
    {
      "server": "square",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.squareup.com]"
    },
    {
      "server": "square",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "square",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "square",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.squareup.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "square",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "square",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.squareup.com equals the issuer the PRM named"
    },
    {
      "server": "square",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.squareup.com"
    },
    {
      "server": "square",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "square",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.squareup.com/register"
    },
    {
      "server": "square",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "square",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "square",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "square",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.squareup.com/sse"
    },
    {
      "server": "square",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.squareup.com]"
    },
    {
      "server": "square",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "square",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "square",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.squareup.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "square",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.squareup.com/.well-known/oauth-protected-resource/sse\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no scope parameter"
    },
    {
      "server": "square",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "square",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.squareup.com equals the issuer the PRM named"
    },
    {
      "server": "square",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.squareup.com"
    },
    {
      "server": "square",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "square",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.squareup.com/register"
    },
    {
      "server": "square",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "square",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "square",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.squareup.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (root HTTP 404)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/ — HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server); could not reach the endpoint"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (endpoint HTTP 302, redirect (not followed to https://api.stackexchange.com/docs/mcp-server))"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; not at either well-known location (root HTTP 404)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/ — HTTP 401; WWW-Authenticate: Bearer, no resource_metadata parameter"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/ — HTTP 401; WWW-Authenticate: Bearer, no scope parameter"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stack-overflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stackoverflow.com/.well-known/oauth-protected-resource — HTTP 404; no protected resource metadata at a well-known location (HTTP 404) and none reached through the challenge (challenge without resource_metadata)"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "stripe",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.stripe.com"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://access.stripe.com/mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.stripe.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://access.stripe.com/mcp equals the issuer the PRM named"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://access.stripe.com/mcp"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; registration_endpoint: https://access.stripe.com/mcp/oauth2/register"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.stripe.com"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://access.stripe.com/mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.stripe.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "stripe",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/ — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.stripe.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "stripe",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.stripe.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [mcp]"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://access.stripe.com/mcp equals the issuer the PRM named"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; issuer: https://access.stripe.com/mcp"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; registration_endpoint: https://access.stripe.com/mcp/oauth2/register"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "stripe",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://access.stripe.com/.well-known/oauth-authorization-server/mcp — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "supabase",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://supabase.com/docs/guides/ai-tools/mcp — \"By default the hosted Supabase MCP server uses dynamic client registration to authenticate with your Supabase org.\""
    },
    {
      "server": "supabase",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://supabase.com/docs/guides/ai-tools/mcp — \"If your MCP client requires an OAuth client ID and secret (e.g. Azure API Center), you can manually create an OAuth app in your Supabase account. [...] After creating the OAuth app, copy the client ID and client secret to your MCP client.\" (Docs say to grant write access to all scopes: 'In the future, the MCP server will support more fine-grained scopes, but for now all scopes are required.')"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.supabase.com/mcp"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://api.supabase.com]"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [organizations:read, projects:read, projects:write, database:write, database:read, analytics:read, secrets:read, edge_functions:read, edge_functions:write, environment:read, environment:write, storage:re…"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [organizations:read, projects:read, projects:write, database:write, database:read, analytics:read, secrets:read, edge_functions:read, edge_functions:write, environment:read, enviro…"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.supabase.com equals the issuer the PRM named"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.supabase.com"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.supabase.com/platform/oauth/apps/register"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256, plain]"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://mcp.supabase.com/mcp"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://api.supabase.com]"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [organizations:read, projects:read, projects:write, database:write, database:read, analytics:read, secrets:read, edge_functions:read, edge_functions:write, environment:read, environment:write, storage:re…"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "supabase",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/mcp — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "supabase",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [organizations:read, projects:read, projects:write, database:write, database:read, analytics:read, secrets:read, edge_functions:read, edge_functions:write, environment:read, enviro…"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.supabase.com equals the issuer the PRM named"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://api.supabase.com"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.supabase.com/platform/oauth/apps/register"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: true"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256, plain]"
    },
    {
      "server": "supabase",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://api.supabase.com/.well-known/oauth-authorization-server — HTTP 200; all 3 endpoints use https"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "todoist",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://ai.todoist.net/mcp"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://todoist.com]"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [data:read_write]"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://ai.todoist.net/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [data:read_write]"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://todoist.com equals the issuer the PRM named"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://todoist.com"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://todoist.com/oauth/register"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; resource: https://ai.todoist.net/mcp"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; authorization_servers: [https://todoist.com]"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported: [data:read_write]"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/mcp — HTTP 401; WWW-Authenticate resource_metadata: https://ai.todoist.net/.well-known/oauth-protected-resource/mcp"
    },
    {
      "server": "todoist",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/mcp — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://ai.todoist.net/.well-known/oauth-protected-resource/mcp\", no scope parameter"
    },
    {
      "server": "todoist",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://ai.todoist.net/.well-known/oauth-protected-resource/mcp — HTTP 200; scopes_supported without offline_access: [data:read_write]"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://todoist.com equals the issuer the PRM named"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://todoist.com"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: true"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://todoist.com/oauth/register"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "todoist",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://todoist.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "vercel",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://vercel.com/docs/mcp/vercel-mcp — \"Vercel MCP protects against confused deputy attacks by requiring explicit user consent for each client connection\" (Vercel acts as its own authorization server rather than a proxy; recorded because the per-client consent behaviour is explicitly stated. The blog post also states: 'We maintain an allowlist of approved clients and require an OAuth consent screen on every connection.' (https://vercel.com/blog/introducing-vercel-mcp-connect-vercel-to-your-ai-tools))"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://vercel.com/docs/mcp/vercel-mcp — \"To ensure secure access, Vercel MCP only supports AI clients that have been reviewed and approved by Vercel. If you're building an MCP client and want it included in the supported clients list below, submit the client review form.\" (The documented path is a manual allowlist review, not self-service issuance of client credentials; docs do not say whether approved clients receive credentials or are allowlisted by redirect URI.)"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.vercel.com/"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://vercel.com]"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [openid]"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.vercel.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [openid]"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://vercel.com equals the issuer the PRM named"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://vercel.com"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.vercel.com/login/oauth/register"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; all 8 endpoints use https"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.vercel.com/"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://vercel.com]"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [openid]"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/ — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.vercel.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "vercel",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/ — HTTP 401; WWW-Authenticate: Bearer error=\"invalid_token\", error_description=\"No authorization provided\", resource_metadata=\"https://mcp.vercel.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "vercel",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.vercel.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported without offline_access: [openid]"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://vercel.com equals the issuer the PRM named"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://vercel.com"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://api.vercel.com/login/oauth/register"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "vercel",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://vercel.com/.well-known/oauth-authorization-server — HTTP 200; all 8 endpoints use https"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "webflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.webflow.com/sse"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.webflow.com]"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.webflow.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.webflow.com equals the issuer the PRM named"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.webflow.com"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.webflow.com/oauth/register"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; resource: https://mcp.webflow.com/sse"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; authorization_servers: [https://mcp.webflow.com]"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; found at the path-aware location"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.webflow.com/.well-known/oauth-protected-resource/sse"
    },
    {
      "server": "webflow",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", resource_metadata=\"https://mcp.webflow.com/.well-known/oauth-protected-resource/sse\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", no scope parameter"
    },
    {
      "server": "webflow",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-protected-resource/sse — HTTP 200; scopes_supported: absent, so no scope is advertised to judge"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.webflow.com equals the issuer the PRM named"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.webflow.com"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: false"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.webflow.com/oauth/register"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "webflow",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.webflow.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "wix",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "wix",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.wix.com"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.wix.com]"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [offline_access]"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.wix.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported includes offline_access: [offline_access]"
    },
    {
      "server": "wix",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.wix.com equals the issuer the PRM named"
    },
    {
      "server": "wix",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.wix.com"
    },
    {
      "server": "wix",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "wix",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.wix.com/register"
    },
    {
      "server": "wix",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "wix",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "wix",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "wix",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; resource: https://mcp.wix.com"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; authorization_servers: [https://mcp.wix.com]"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported: [offline_access]"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; found at the root location"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/sse — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.wix.com/.well-known/oauth-protected-resource"
    },
    {
      "server": "wix",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/sse — HTTP 401; WWW-Authenticate: Bearer realm=\"OAuth\", error=\"invalid_token\", error_description=\"Missing or invalid access token\", resource_metadata=\"https://mcp.wix.com/.well-known/oauth-protected-resource\", no scope parameter"
    },
    {
      "server": "wix",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-protected-resource — HTTP 200; scopes_supported includes offline_access: [offline_access]"
    },
    {
      "server": "wix",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.wix.com equals the issuer the PRM named"
    },
    {
      "server": "wix",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.wix.com"
    },
    {
      "server": "wix",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "wix",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.wix.com/register"
    },
    {
      "server": "wix",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "wix",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [plain, S256]"
    },
    {
      "server": "wix",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.wix.com/.well-known/oauth-authorization-server — HTTP 200; all 4 endpoints use https"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.resource-indicator",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.as.refresh-rotation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.audience-validation",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.401-on-invalid",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.insufficient-scope",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.no-passthrough",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.proxy.consent",
      "revision": "2026-07-28",
      "status": "not-applicable",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as API Key; no OAuth authorization server is involved."
    },
    {
      "server": "zapier",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-protected-resource/api/mcp/mcp — HTTP 200; resource: https://mcp.zapier.com/api/mcp/mcp"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-protected-resource/api/mcp/mcp — HTTP 200; authorization_servers: [https://mcp.zapier.com]"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-protected-resource/api/mcp/mcp — HTTP 200; scopes_supported: [openid, profile, email]"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-protected-resource/api/mcp/mcp — HTTP 200; found at the path-aware location"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/api/mcp/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"Zapier MCP\", error=\"invalid_token\", no resource_metadata parameter"
    },
    {
      "server": "zapier",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/api/mcp/mcp — HTTP 401; WWW-Authenticate: Bearer realm=\"Zapier MCP\", error=\"invalid_token\", no scope parameter"
    },
    {
      "server": "zapier",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-protected-resource/api/mcp/mcp — HTTP 200; scopes_supported without offline_access: [openid, profile, email]"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.zapier.com equals the issuer the PRM named"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; issuer: https://mcp.zapier.com"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: https://mcp.zapier.com/api/v1/oauth/register"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "zapier",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zapier.com/.well-known/oauth-authorization-server — HTTP 200; all 5 endpoints use https"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "vendor-claim",
      "observedAt": "2026-10-13T00:00:00Z",
      "observedBy": "jbspeakr",
      "evidence": "https://github.com/jaw9c/awesome-remote-mcp-servers lists the server as OAuth 2.1 without saying whether Dynamic Client Registration is offered."
    },
    {
      "server": "zoom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — \"Zoom remote MCP servers only support manual client registration through app creation and do not support other client registration methods such as Dynamic Client Registration (DCR) or Client ID Metadata Documents (CIMD).\""
    },
    {
      "server": "zoom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — \"Zoom remote MCP servers only support manual client registration through app creation and do not support other client registration methods such as Dynamic Client Registration (DCR) or Client ID Metadata Documents (CIMD).\""
    },
    {
      "server": "zoom",
      "feature": "mcp.as.preregistration",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — \"Zoom remote MCP servers require manual client registration. [...] Get from your Zoom app's configuration page on the Zoom App Marketplace.\" (Client developer creates an app in the Zoom App Marketplace, takes the OAuth Client ID and Client Secret from the app's Basic information page, and enters the MCP client's callback in the OAuth redirect URL field (examples given for Claude and ChatGPT).)"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — \"While Zoom uses traditional OAuth 2.0, the MCP specification mandates OAuth 2.1 compliance, so ensure your client includes the required code_verifier (PKCE) during the exchange.\" (PKCE is stated as required; the S256 challenge method is not named.)"
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.bearer-header",
      "revision": "2026-07-28",
      "status": "partial",
      "method": "vendor-claim",
      "observedAt": "2026-10-14T00:00:00Z",
      "observedBy": "jbspeakr (documentation pass with Claude Code)",
      "evidence": "https://developers.zoom.us/docs/mcp/servers/connect-to-zoom-mcp-servers/ — \"Once you have the access token, your MCP client must include it as a Bearer token in the Authorization header for all requests to the Zoom MCP server.\" (Docs require the Authorization header; they do not say whether tokens in the query string are rejected.)"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; resource: https://mcp.zoom.us/mcp/zoom/streamable"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; authorization_servers: [https://zoom.us]"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported: [agentic_search:read:search, meeting:write:meeting, meeting:read:search, docs:update:collaborator, docs:read:export, docs:write:import, agentic_search:read:ask, hub:write:content, meeting:upda…"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; found at the path-aware location"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "unknown",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/mcp/zoom/streamable — HTTP 405; no 401 challenge to an unauthenticated GET, nothing to judge"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported without offline_access: [agentic_search:read:search, meeting:write:meeting, meeting:read:search, docs:update:collaborator, docs:read:export, docs:write:import, agentic_search:read:ask, hub:writ…"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; issuer: https://zoom.us equals the issuer the PRM named"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; issuer: https://zoom.us"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-16T01:18:16Z",
      "observedBy": "scanner@0.2.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; all 2 endpoints use https"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; resource: https://mcp.zoom.us/mcp/zoom/streamable"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.authorization-servers",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; authorization_servers: [https://zoom.us]"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported: [agentic_search:read:search, meeting:write:meeting, meeting:read:search, docs:update:collaborator, docs:read:export, docs:write:import, agentic_search:read:ask, hub:write:content, meeting:upda…"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.well-known",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; found at the path-aware location"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.www-authenticate",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/mcp/zoom/streamable — HTTP 401; WWW-Authenticate resource_metadata: https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable"
    },
    {
      "server": "zoom",
      "feature": "mcp.rs.scope-challenge",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/mcp/zoom/streamable — HTTP 401; WWW-Authenticate: Bearer resource_metadata=\"https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable\", no scope parameter"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported without offline_access: [agentic_search:read:search, meeting:write:meeting, meeting:read:search, docs:update:collaborator, docs:read:export, docs:write:import, agentic_search:read:ask, hub:writ…"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.issuer-match",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; issuer: https://zoom.us equals the issuer the PRM named"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.metadata",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; issuer: https://zoom.us"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.cimd",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; client_id_metadata_document_supported: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.dcr",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; registration_endpoint: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.iss-param",
      "revision": "2026-07-28",
      "status": "unsupported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; authorization_response_iss_parameter_supported: absent"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.pkce-s256",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; code_challenge_methods_supported: [S256]"
    },
    {
      "server": "zoom",
      "feature": "mcp.as.https",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-17T01:18:47Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://zoom.us/.well-known/oauth-authorization-server — HTTP 200; all 2 endpoints use https"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.scopes-supported",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported: [docs:read:export, agentic_search:read:search, my_notes:read:content, meeting:update:in_meeting_controls, docs:write:import, cloud_recording:read:content, docs:read:list_file_collaborators, do…"
    },
    {
      "server": "zoom",
      "feature": "mcp.prm.no-offline-access",
      "revision": "2026-07-28",
      "status": "supported",
      "method": "passive-scan",
      "observedAt": "2026-10-18T01:18:14Z",
      "observedBy": "scanner@0.3.0",
      "evidence": "https://mcp.zoom.us/.well-known/oauth-protected-resource/mcp/zoom/streamable — HTTP 200; scopes_supported without offline_access: [docs:read:export, agentic_search:read:search, my_notes:read:content, meeting:update:in_meeting_controls, docs:write:import, cloud_recording:read:content, docs:read:list…"
    }
  ]
}