{"name":"onyx_mcp_oauth_audit","tier":"free","price_usdc":"0","endpoint":"https://onyx-actions.onrender.com/v1/onyx_mcp_oauth_audit","method":"POST","input_schema":{"type":"object","properties":{"server_url":{"type":"string","description":"Base URL of the MCP server to audit."}},"required":["server_url"]},"description":"OAuth 2.1 + RFC 7591 DCR compliance audit for any MCP server. Probes the 5 standard discovery + registration + token endpoints, validates each against the relevant RFC, returns a composite 0-100 score and remediation list. Free tier — useful for MCP operators preparing for ChatGPT custom-connector / Claude Managed Agents discovery.","when_to_use":"An MCP server operator wants to know if their OAuth/DCR surface is ready for the MCP April 2026 spec — specifically discoverable by ChatGPT custom connector and Claude Managed Agents.","vs_alternatives":"No public OAuth/DCR compliance auditor for MCP exists. ZAP and other OAuth fuzzers are generic and noisy. This catalogs only the 5 endpoints MCP clients actually probe.","example_request":{"server_url":"https://onyx-actions.onrender.com"},"example_response":{"ok":true,"score":100,"grade":"A","ready_for_chatgpt_custom_connector":true,"endpoints":[{"endpoint":"oauth-authorization-server","passes":true,"status":200},"..."]},"settle_to":"0x3fD9ee1373562f894D322B37DFFAd7a5D2b2d78f","network":"base","facilitator":"https://facilitator.xpay.sh","payment_required":false,"free_introspection":true,"note":"GET this URL = free introspection card. POST with x402 payment header to call."}