NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

mcp-authprobe

io.github.Enigmacker/mcp-authprobe ยท v0.8.0

Active OAuth tests for remote MCP servers you own: tokens, PKCE, redirect_uri, audience, CSRF.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add mcp-authprobe -e MCP_AUTHPROBE_SECRET_FILE=<MCP_AUTHPROBE_SECRET_FILE> -e MCP_AUTHPROBE_SECRET=<MCP_AUTHPROBE_SECRET> -e MCP_AUTHPROBE_CREDENTIALS_FILE=<MCP_AUTHPROBE_CREDENTIALS_FILE> -e MCP_AUTHPROBE_ALLOW_PRIVATE=<MCP_AUTHPROBE_ALLOW_PRIVATE> -e MCP_AUTHPROBE_LAB_ORIGINS=<MCP_AUTHPROBE_LAB_ORIGINS> -e MCP_AUTHPROBE_TIMEOUT_MS=<MCP_AUTHPROBE_TIMEOUT_MS> -- npx -y [email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "mcp-authprobe": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "MCP_AUTHPROBE_SECRET_FILE": "<MCP_AUTHPROBE_SECRET_FILE>",
        "MCP_AUTHPROBE_SECRET": "<MCP_AUTHPROBE_SECRET>",
        "MCP_AUTHPROBE_CREDENTIALS_FILE": "<MCP_AUTHPROBE_CREDENTIALS_FILE>",
        "MCP_AUTHPROBE_ALLOW_PRIVATE": "<MCP_AUTHPROBE_ALLOW_PRIVATE>",
        "MCP_AUTHPROBE_LAB_ORIGINS": "<MCP_AUTHPROBE_LAB_ORIGINS>",
        "MCP_AUTHPROBE_TIMEOUT_MS": "<MCP_AUTHPROBE_TIMEOUT_MS>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "mcp-authprobe": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "MCP_AUTHPROBE_SECRET_FILE": "<MCP_AUTHPROBE_SECRET_FILE>",
        "MCP_AUTHPROBE_SECRET": "<MCP_AUTHPROBE_SECRET>",
        "MCP_AUTHPROBE_CREDENTIALS_FILE": "<MCP_AUTHPROBE_CREDENTIALS_FILE>",
        "MCP_AUTHPROBE_ALLOW_PRIVATE": "<MCP_AUTHPROBE_ALLOW_PRIVATE>",
        "MCP_AUTHPROBE_LAB_ORIGINS": "<MCP_AUTHPROBE_LAB_ORIGINS>",
        "MCP_AUTHPROBE_TIMEOUT_MS": "<MCP_AUTHPROBE_TIMEOUT_MS>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-authprobe": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "MCP_AUTHPROBE_SECRET_FILE": "<MCP_AUTHPROBE_SECRET_FILE>",
        "MCP_AUTHPROBE_SECRET": "<MCP_AUTHPROBE_SECRET>",
        "MCP_AUTHPROBE_CREDENTIALS_FILE": "<MCP_AUTHPROBE_CREDENTIALS_FILE>",
        "MCP_AUTHPROBE_ALLOW_PRIVATE": "<MCP_AUTHPROBE_ALLOW_PRIVATE>",
        "MCP_AUTHPROBE_LAB_ORIGINS": "<MCP_AUTHPROBE_LAB_ORIGINS>",
        "MCP_AUTHPROBE_TIMEOUT_MS": "<MCP_AUTHPROBE_TIMEOUT_MS>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
MCP_AUTHPROBE_SECRET_FILE
Optional		Path to the ownership secret (create it with `mcp-authprobe ownership init <host>`). Without a secret, only discovery runs.
MCP_AUTHPROBE_SECRET
Optional, secret		Ownership secret, if not read from MCP_AUTHPROBE_SECRET_FILE.
MCP_AUTHPROBE_CREDENTIALS_FILE
Optional		Path to a test grant written by `mcp-authprobe login`, for the refresh token checks. It is consumed by a scan.
MCP_AUTHPROBE_ALLOW_PRIVATE
Optional		Set to 1 to allow loopback and private targets (local labs only).
MCP_AUTHPROBE_LAB_ORIGINS
Optional		Comma-separated lab origins exempt from the ownership proof, e.g. http://127.0.0.1:8080.
MCP_AUTHPROBE_TIMEOUT_MS
Optional		Per-request timeout in milliseconds (default 10000).

Details

Package[email protected] (NPM, stdio)
First published4 Nov 2026
Last updated4 Nov 2026
Registry nameio.github.Enigmacker/mcp-authprobe

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.