# mcpoauthscopegate-mcp

Reviews OAuth scopes on remote MCP servers before a token is granted, then issues consent receipts. Useful when you wire up third-party MCP servers.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: clauxel
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/clauxel/mcp-oauth-scope-gate-mcp
- Updated: 2026-05-19
- HTML: https://affpapa.org/en/nevibecode/mcp/mcpoauthscopegate-mcp

## What it does

The server sits in front of token issuance. It scores the risk of the scopes a remote server asks for, routes an approval request, and produces a consent receipt once that is done. Two more tools cover policy validation and audit export.

Five tools ship with it: `inspect_oauth_scope_risk`, `request_scope_approval`, `issue_consent_receipt`, `validate_server_scope_policy`, `export_scope_audit`. It is a remote MCP over Streamable HTTP at `https://mcpoauthscopegate.clauxel.com/mcp`, so your client has to support that transport.

This is a paid hosted service, not something you run locally. Calls need a bearer token from the product site — send it as `Authorization: Bearer <token>`, or the request goes nowhere. The repository holds documentation and the server card only; production code is not published there.

## Requirements
- Remote server: `https://mcpoauthscopegate.clauxel.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add mcpoauthscopegate-mcp --url https://mcpoauthscopegate.clauxel.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "mcpoauthscopegate-mcp": {
            "url": "https://mcpoauthscopegate.clauxel.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "mcpoauthscopegate-mcp": {
            "type": "http",
            "url": "https://mcpoauthscopegate.clauxel.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http mcpoauthscopegate-mcp https://mcpoauthscopegate.clauxel.com/mcp
```

## When to use it
- score OAuth scope risk before a token is issued
- route an approval for a third-party MCP server
- produce a consent receipt for an audit trail
- check a server against a scope policy
- export a scope audit log

## Example prompts
- Inspect the OAuth scope risk for this MCP server before I connect it
- Request approval for the `files:read` scope
- Export the scope audit log for last week

## Similar
- [zeroidagent-mcp](https://affpapa.org/en/nevibecode/mcp/zeroidagent-mcp.md) — MCP server
- [toolcallwitness-mcp](https://affpapa.org/en/nevibecode/mcp/toolcallwitness-mcp.md) — MCP server
- [Fathom MCP Server](https://affpapa.org/en/nevibecode/mcp/fathom-mcp-server.md) — MCP server · ★ 16
- [Pairoa](https://affpapa.org/en/nevibecode/mcp/pairoa.md) — MCP server · ★ 3
- [skill-security](https://affpapa.org/en/nevibecode/skills/skill-security.md) — skill · 8000 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md