mcpoauthscopegate-mcp — Claude Code MCP server: OAuth scope checks
Reviews OAuth scopes on remote MCP servers before a token is granted, then issues consent receipts. Useful when you wire up third-party MCP servers.
claude mcp add --transport http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcpWhat mcpoauthscopegate-mcp does
The server sits in front of token issuance. It scores the risk of the scopes a remote server asks for, routes an approval request, and produces a consent receipt once that is done. Two more tools cover policy validation and audit export.
Five tools ship with it: inspect_oauth_scope_risk, request_scope_approval, issue_consent_receipt, validate_server_scope_policy, export_scope_audit. It is a remote MCP over Streamable HTTP at https://mcpoauthscopegate.clauxel.com/mcp, so your client has to support that transport.
This is a paid hosted service, not something you run locally. Calls need a bearer token from the product site — send it as Authorization: Bearer <token>, or the request goes nowhere. The repository holds documentation and the server card only; production code is not published there.
What it helps with
- score OAuth scope risk before a token is issued
- route an approval for a third-party MCP server
- produce a consent receipt for an audit trail
- check a server against a scope policy
- export a scope audit log
Example prompts for the agent
- Inspect the OAuth scope risk for this MCP server before I connect it
- Request approval for the
files:readscope - Export the scope audit log for last week
How to install mcpoauthscopegate-mcp
Platform CLI: remote server
claude mcp add --transport http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcpPlatform CLI: remote server
codex mcp add mcpoauthscopegate-mcp --url https://mcpoauthscopegate.clauxel.com/mcpConfig file
{
"mcpServers": {
"mcpoauthscopegate-mcp": {
"url": "https://mcpoauthscopegate.clauxel.com/mcp"
}
}
}Config file
{
"servers": {
"mcpoauthscopegate-mcp": {
"type": "http",
"url": "https://mcpoauthscopegate.clauxel.com/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcpoauthscopegate-mcp
How do I install mcpoauthscopegate-mcp in Claude Code?
Run claude mcp add --transport http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcp. Calls still need a bearer token from the product site.
What does mcpoauthscopegate-mcp do?
It inspects the OAuth scopes a remote MCP server requests, scores their risk, routes approval and issues a consent receipt. Policy validation and audit export are included as well.
Do I need a token to use it?
Yes. It is a paid hosted service, so you get a token from the product website and pass it as Authorization: Bearer <token>.
