MCP OAuth diagnostics

Observed MCP OAuth client behavior

See whether IDEs and developer tools use CIMD, fall back to Dynamic Client Registration, or send static client IDs during OAuth.

Authorization server: /.well-known/oauth-authorization-server

Test endpoint

Add this Streamable HTTP MCP server URL to the client you want to test.

https://cimd-reader.akxen.tech/mcp

Codex CLI

codex mcp add cimd_reader \
  --url https://cimd-reader.akxen.tech/mcp \
  --oauth-resource https://cimd-reader.akxen.tech/mcp

codex mcp login cimd_reader

Claude Code

claude mcp add --transport http \
  cimd_reader \
  https://cimd-reader.akxen.tech/mcp

# then run /mcp in Claude Code

VS Code

{
  "servers": {
    "cimd_reader": {
      "type": "http",
      "url": "https://cimd-reader.akxen.tech/mcp",
      "oauth": {
        "clientId": "https://vscode.dev/oauth/client-metadata.json"
      }
    }
  }
}

Claude Code

CLI

cimd

Observed result: Authorization used client_id metadata URL https://claude.ai/oauth/claude-code-client-metadata.
Claimed status: verified
Metadata name: Claude Code
Observed behavior: cimd
Metadata URL: https://claude.ai/oauth/claude-code-client-metadata
Client URI: https://claude.ai
Grant types: authorization_code, refresh_token
Response types: code
Token auth: none
App type: Not observed
Redirect URIs: http://localhost/callback, http://127.0.0.1/callback

Last observed: 2026-08-11T21:32:48.732Z

Codex CLI

CLI

dcr

Observed result: Codex dynamically registered and received client_id dcr-codex.
Claimed status: unknown
Metadata name: Codex CLI
Observed behavior: dcr
Metadata URL: Unknown
Client URI: Not observed
Grant types: Not observed
Response types: Not observed
Token auth: Not observed
App type: Not observed
Redirect URIs: Not observed

Last observed: 2026-08-11T20:54:19.572Z

Cursor

IDE

unknown

Observed result: No OAuth traffic observed yet.
Claimed status: unknown
Metadata name: Cursor
Observed behavior: unknown
Metadata URL: Unknown
Client URI: Not observed
Grant types: Not observed
Response types: Not observed
Token auth: Not observed
App type: Not observed
Redirect URIs: Not observed

Last observed: not observed

GitHub Copilot

Assistant

unknown

Observed result: No OAuth traffic observed yet.
Claimed status: unknown
Metadata name: GitHub Copilot
Observed behavior: unknown
Metadata URL: Unknown
Client URI: Not observed
Grant types: Not observed
Response types: Not observed
Token auth: Not observed
App type: Not observed
Redirect URIs: Not observed

Last observed: not observed

MCPJam

Debugger

cimd

Observed result: Authorization used client_id metadata URL https://www.mcpjam.com/.well-known/oauth/client-metadata.json.
Claimed status: unknown
Metadata name: MCPJam
Observed behavior: cimd
Metadata URL: https://www.mcpjam.com/.well-known/oauth/client-metadata.json
Client URI: https://www.mcpjam.com
Grant types: authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:device_code
Response types: code
Token auth: none
App type: native
Redirect URIs: http://127.0.0.1:6274/oauth/callback, http://127.0.0.1:6274/callback, http://127.0.0.1:6274/oauth/callback/debug, http://localhost:6274/oauth/callback, http://localhost:6274/callback, http://localhost:6274/oauth/callback/debug, http://127.0.0.1:5173/oauth/callback, http://127.0.0.1:5173/oauth/callback/debug, http://localhost:5173/oauth/callback, http://localhost:5173/oauth/callback/debug, https://app.mcpjam.com/oauth/callback, https://app.mcpjam.com/oauth/callback/debug, https://staging.mcpjam.com/oauth/callback, https://staging.mcpjam.com/oauth/callback/debug, https://score.mcpjam.com/oauth/callback, https://score.mcpjam.com/oauth/callback/debug, https://www.score.mcpjam.com/oauth/callback, https://www.score.mcpjam.com/oauth/callback/debug

Last observed: 2026-08-11T21:08:56.858Z

Visual Studio Code

IDE

cimd

Observed result: Authorization used client_id metadata URL https://vscode.dev/oauth/client-metadata.json.
Claimed status: unknown
Metadata name: Visual Studio Code
Observed behavior: cimd
Metadata URL: https://vscode.dev/oauth/client-metadata.json
Client URI: https://vscode.dev/product
Grant types: authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:device_code
Response types: code
Token auth: none
App type: native
Redirect URIs: http://127.0.0.1:33418/, https://vscode.dev/redirect

Last observed: 2026-08-11T19:24:35.669Z

Windsurf

IDE

unknown

Observed result: No OAuth traffic observed yet.
Claimed status: unknown
Metadata name: Windsurf
Observed behavior: unknown
Metadata URL: Unknown
Client URI: Not observed
Grant types: Not observed
Response types: Not observed
Token auth: Not observed
App type: Not observed
Redirect URIs: Not observed

Last observed: not observed