clauxel avatar

Mcpoauthscopegate Mcp

clauxel/mcp-oauth-scope-gate-mcp

A hosted service that sits between your MCP client and remote OAuth-protected servers to review and approve permission scopes before tokens get issued. You call tools like inspect_oauth_scope_risk to analyze what a server is requesting, request_scope_approval to route decisions through your approval workflow, and issue_consent_receipt to generate audit trails. It validates server policies against your requirements and exports scope audits for compliance reviews. Reach for this when you're connecting to third-party MCP servers and need governance over what permissions they can request from your OAuth provider. Requires a paid subscription and uses streamable HTTP transport with bearer token authentication.

tools
5
auth
Required
transport
HTTP
last updated
May 19, 2026

Tools

5 tools

Public tool metadata for what this MCP can expose to an agent.

inspect_oauth_scope_risk

No parameter schema in public metadata yet.

request_scope_approval

No parameter schema in public metadata yet.

issue_consent_receipt

No parameter schema in public metadata yet.

validate_server_scope_policy

No parameter schema in public metadata yet.

export_scope_audit

No parameter schema in public metadata yet.

Sponsors

Readme

MCP OAuth Scope Gate

Review OAuth scopes for remote MCP servers before tokens are granted.

Paid remote MCP for OAuth scope risk inspection, approval routing, consent receipts, server policy validation, and scope audit exports.

Public Endpoints

Access

This is a paid hosted remote MCP. Production calls require a bearer token issued from the product website.

Authorization: Bearer <token>

Unauthenticated browser visits to /mcp return a clear JSON error instead of internal details.

Tools

  • inspect_oauth_scope_risk
  • request_scope_approval
  • issue_consent_receipt
  • validate_server_scope_policy
  • export_scope_audit

Quick Start

  1. Open the website and choose a plan.
  2. Create or request an API token.
  3. Add the endpoint to an MCP client that supports Streamable HTTP remote servers.
  4. Send JSON-RPC requests with the bearer token.

View the full README on GitHub

Details

Repository
github.com/clauxel/mcp-oauth-scope-gate-mcp
Transport
HTTP
Auth
Required
Registry
MCP registry, active

More from clauxel