bymustfa

bymustfa/mcp-audprobe

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

1 stars 0 forks 1 watchers Python MIT License
audience-validation ci github-action jwt mcp model-context-protocol oauth python security security-testing
View on GitHub
5 Open Issues Need Help Last updated: Nov 1, 2026

Open Issues Need Help

View All on GitHub
Run the test suite on Windows and macOS in CI 3 days ago
enhancement help wanted good first issue
bymustfa/mcp-audprobe
1

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

Python
#audience-validation#ci#github-action#jwt#mcp#model-context-protocol#oauth#python#security#security-testing
Add --header option for extra request headers (API gateways, tenant IDs) 3 days ago
enhancement help wanted good first issue
bymustfa/mcp-audprobe
1

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

Python
#audience-validation#ci#github-action#jwt#mcp#model-context-protocol#oauth#python#security#security-testing
New check: nbf in the future / iat far in the future should be rejected 3 days ago
enhancement help wanted good first issue
bymustfa/mcp-audprobe
1

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

Python
#audience-validation#ci#github-action#jwt#mcp#model-context-protocol#oauth#python#security#security-testing
Add SARIF output (--sarif FILE) for GitHub code scanning 3 days ago
enhancement help wanted good first issue
bymustfa/mcp-audprobe
1

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

Python
#audience-validation#ci#github-action#jwt#mcp#model-context-protocol#oauth#python#security#security-testing
Support mcp 2.x in the demo servers (FastMCP -> MCPServer rename) 3 days ago
enhancement help wanted good first issue
bymustfa/mcp-audprobe
1

Actively test MCP servers' OAuth bearer token audience (aud), issuer (iss) and expiry validation: CLI + GitHub Action, with a local fake auth server and demo. Only for servers you own.

Python
#audience-validation#ci#github-action#jwt#mcp#model-context-protocol#oauth#python#security#security-testing