ABOUT

About MCP OAuth Lab

MCP OAuth Lab is an independent, free web project built to debug MCP OAuth metadata, PKCE values, and protected-resource discovery. It is designed for developers implementing authentication for remote MCP servers. The tool runs without an account and aims to turn a narrow technical task into a clear, repeatable workflow.

What this site provides

The site separates protocol checks from security advice and explains why each field matters. It does not request access tokens and should never be used to paste live client secrets.

Where practical, processing happens locally in the browser. That design improves speed and reduces unnecessary collection of technical material. The project is not affiliated with Google, Anthropic, Microsoft, OpenAI, or the maintainers of any protocol mentioned unless a page explicitly says otherwise.

Editorial principles

• Explain checks and outputs in plain English.
• Keep examples useful, reproducible, and free of real credentials.
• Update material when the underlying specifications or common tools change.
• State important limitations instead of presenting automated output as professional advice.

Open source and corrections

The website source is available on GitHub. If you find an inaccurate rule, outdated example, accessibility problem, or broken link, please use the contact options below. Corrections that improve safety or technical accuracy are prioritized.