rt_check_oauth
Tests OAuth token validation for HTTP/SSE MCP servers by sending requests with missing, invalid, and expired JWT tokens, flagging servers that accept unauthenticated or invalid requests.
Instructions
Test if HTTP/SSE MCP server properly validates OAuth tokens. Sends requests with no token, invalid token, and expired-format JWT. Flags servers that accept unauthenticated or invalid requests. Only applies to HTTP/SSE transport.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| env | No | Additional environment variables for stdio | |
| url | No | MCP server URL for HTTP/SSE transport (e.g. 'http://localhost:3000/mcp') | |
| args | No | Command arguments for stdio (e.g. ['run', 'server.js']) | |
| command | No | Server command for stdio transport (e.g. 'node', 'bun', 'npx') | |
| headers | No | Custom HTTP headers (e.g. { 'Authorization': 'Bearer token' }) | |
| timeout_ms | No | Connection timeout in milliseconds (default: 30000) |