Skip to main content

Browse the directory

Showing 2 resources for "token-audience"
Saved
Active

1 review · 1 limited in this set — compare to see which signals differ.

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.

2 scanned

Install payload

Install payload is broadly covered in current results.

good

100% (2/2)

Adoption queue

Browse adoption queue · balanced

1/2 visible results are in hold tier and need mitigation before adoption.

ready 0caution 1hold 1
caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

guides/mcp-protected-resource-metadata-verification-guide · trust review · confidence 67%

MCP OAuth Token Audience Checklist

1 blockers: Metadata review

hold

42/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

guides/mcp-oauth-token-audience-checklist · trust limited · confidence 67%

Decision confidence

Decision confidence scan · balanced

0/2 results are high-confidence for the selected preset.

high 0medium 2low 0

MCP Protected Resource Metadata Verification Guide

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

guides/mcp-protected-resource-metadata-verification-guide · trust review

MCP OAuth Token Audience Checklist

Address Metadata review, Package integrity before broader rollout.

medium

48/100

Missing: Metadata reviewMissing: Package integrity

guides/mcp-oauth-token-audience-checklist · trust limited

Freshness distribution

Current results are broadly fresh

Median age 53 days; all 2 scanned entries are within 90 days.

median 53d

Aging

91–180 days

0%

0 entries

Stale

> 180 days

0%

0 entries

Practical checklist for reviewing remote MCP server authorization, resource indicators, bearer-token handling, HTTPS transport, PKCE, and token passthrough risks before connecting an AI client.

Practical guide for checking MCP protected resource metadata, authorization server discovery, resource indicators, token audience binding, and 401 challenge behavior before trusting a remote MCP server.