app
I scanned 30 production MCP servers' OAuth – only 1 earned an A
A niche OAuth audit tool with limited docs and shaky maintenance – not worth adopting unless you have a very specific need.
3.9Overall
Utility5
Onboarding4
Craft4
Niche fit3
Longevity3
Five dimensions scored independently; overall is a weighted average. Scores are only comparable within this same rubric.
Good for
Security audit teams or developers needing a quick OAuth config check
Not for
Teams with low security compliance needs or those already using mature solutions
Project description
github.com
Alternatives
OWASP ZAPOAuth2-Scanner