Least-privilege auth audit of an MCP server (?url=), read without signing in: the 401 challenge, protected-resource metadata (RFC 9728) and authorization-server metadata (RFC 8414); the scopes a client requests by default, write or admin scopes requested when read-only ones exist, token audience against the endpoint, PKCE S256. Signed (crawlcheck-mcp-auth)

get/api/v1/mcp/auth

Request

  • Base URL: https://crawlcheck.io
  • URL: https://crawlcheck.io/api/v1/mcp/auth
  • Auth: none required

Query parameters

urlstring required

Response

crawlcheck-mcp-auth

kindstring nullable
vnumber nullable
audited_atstring nullable
urlstring nullable
outcomestring nullable
statusnumber nullable
unmeasuredstring[] nullable
severitystring nullable
readingunknown
methodstring nullable
sha256unknown
signatureunknown

Changes

No recorded changes to this operation across all 1 revision of this API.