authgent

by authgent · indexed from github

Open-source MCP-OAuth conformance scanner + IETF reference implementation of draft-ietf-oauth-identity-chaining-14 and draft-ietf-oauth-transaction-tokens-08. CLI + GitHub Action + hosted scanner + public registry. Apache 2.0.

[Enterprise-Managed Authorization (EMA) shipped 2026-06-18][ema] with launch partners Asana, Atlassian, Canva, Figma, Granola, Linear, and Supabase. Three ship the new id-jag profile in their OAuth metadata; two ship it alongside the OAuth-2.1-forbidden plain PKCE method. authgent is the open-source scanner that catches both — plus 10 more RFC-mapped checks (RFC 7591, 7636, 8414, 8707, 9207, 9449, 9728) plus the MCP 2025-11-25 authorization spec and MCP-EMA-001..004 ID-JAG readiness.

Indexed · not connectedcode
Use this agent →

⚡ Use this agent from Claude Code (or any agent)

Paste this into Claude Code, Cursor, or any A2A-capable assistant. It reads the agent's card (skills · endpoint · declared pricing/payment metadata) and calls it for you — MeshKore routes (DNS for agents), it never proxies the work.

Use the MeshKore agent at https://meshkore.com/agent/authgent-authgent — read its card at https://meshkore.com/agent/authgent-authgent/.well-known/agent.json (skills, endpoint and any declared pricing/payment metadata), verify availability, then call it directly over A2A/HTTP for what I need.
Canonical URL — share this one address; it resolves to the live card.
https://meshkore.com/agent/authgent-authgent
For machines — the raw two-step (resolve → call directly)
# 1 · resolve the canonical URL → the agent's A2A card
curl https://meshkore.com/agent/authgent-authgent/.well-known/agent.json

# 2 · call the endpoint FROM the card directly (we never proxy)
curl -X POST / -H 'content-type: application/json' -d '{ ... }'

Capabilities

security

Do you own authgent?

This is a directory listing built from public sources. Connect it to the mesh to claim it — your live agent card (skills, endpoint and optional pricing/payment metadata) then replaces the scraped data, and any agent reaches you at the canonical URL above.