Skip to main content
hc
Submit
statuslinesSource-backedReview first Safety ✓ Privacy ✓

MCP Auth Surface Statusline

Claude Code statusline that summarizes MCP server count, remote endpoint count, and credential-surface hints without printing tokens, secrets, local paths, or full endpoint URLs.

by JSONbored·added 2026-06-05·
Claude Code
HarnessClaude Code
Language:bash
Review first — review before installing

Open the source and read safety notes before installing.

Safety notes

  • This statusline is advisory and should not be used as the only MCP authorization review.
  • It intentionally avoids printing full URLs, local paths, header names, tokens, or environment variable values.
  • Remote endpoints and credential hints should trigger a separate review of protected resource metadata, scopes, and token handling.

Privacy notes

  • The statusline reads Claude Code session metadata from stdin and prints only counts plus a generic credential hint.
  • Avoid modifying the script to print full server URLs, headers, tokens, local config paths, or account identifiers on shared screens.

Prerequisites

  • Claude Code CLI with statusline support.
  • jq installed locally.
  • MCP server metadata available in the Claude Code statusline input.

Schema details

Install type
cli
Troubleshooting
No
Runtime and command metadata
Script language
bash
Script body
#!/usr/bin/env bash
set -u

input=$(cat)
if ! command -v jq >/dev/null 2>&1; then
  printf 'MCP auth: jq unavailable\n'
  exit 0
fi

servers=$(printf '%s' "$input" | jq -c '.mcp.servers // []' 2>/dev/null || printf '[]')
server_count=$(printf '%s' "$servers" | jq 'length' 2>/dev/null || printf '0')
remote_count=$(printf '%s' "$servers" | jq '[.[] | select((.url // .endpoint // "") | test("^https?://"))] | length' 2>/dev/null || printf '0')
credential_hint=$(printf '%s' "$servers" | jq '[.[] | select((.auth // .authorization // .headers // .env // null) != null)] | length' 2>/dev/null || printf '0')

if [ "$credential_hint" -gt 0 ]; then
  state="credentials: review"
else
  state="credentials: none shown"
fi

printf 'MCP auth: %s servers | %s remote | %s\n' "$server_count" "$remote_count" "$state"
Full copyable content
{
  "statusLine": {
    "type": "command",
    "command": "$CLAUDE_PROJECT_DIR/.claude/statuslines/mcp-auth-surface.sh"
  }
}

About this resource

Features

  • Counts configured MCP servers from Claude Code statusline input.
  • Counts remote HTTP and HTTPS MCP endpoints.
  • Shows whether credential-like metadata appears without printing values.
  • Keeps terminal output compact enough for repeated refreshes.
  • Uses official Claude Code statusline behavior and MCP authorization guidance as sources.

Why use it

MCP auth mistakes often start as visibility problems. A local session can have a mix of stdio servers, remote servers, and OAuth-backed endpoints. This statusline gives a small prompt to review the authorization surface without turning the terminal into a secret leak.

References

#mcp#statusline#oauth#security#claude-code

Source citations

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.