Developer Tools · Security
Auth Discovery
Check
Check an OIDC/OAuth issuer's discovery documents in chat
Auth Discovery Check runs the same live engine here and in your assistant
Live playground
Use Auth Discovery Check now
Point either tool at a public issuer or .well-known URL and get a live spec-profile verdict — metadata conformance, JWKS parse, and endpoint reachability, all from public documents only.
Your usage
—
Free forever — create a free account for a bigger monthly allowance that follows you across every app and every assistant.Pooled across every app and surface. Manage usage
Loading the live tools…
Marketplaces
Open Auth Discovery Check where you already work — every listing runs the same live engine as this page.
- Marketplace listings are on the way. Meanwhile, point any MCP-compatible assistant straight at the live endpoint:
https://powmcp.com/auth-discovery-check/mcp
Proof
Real apps.Real engines.Real results.
- Application
- Auth Discovery Check
- Category
- Developer Tools
- Platform
- Web
Engine Anatomy
Proof
Auth Discovery Check
What it does
Check an OIDC/OAuth issuer's discovery documents in chat
Validate a public OIDC/OAuth issuer or remote MCP server's discovery-document family — the openid-configuration (OIDC Discovery 1.0), oauth-authorization-server (RFC 8414), and oauth-protected-resource (RFC 9728) well-known documents — against a pinned spec profile, then live-traverse the JWKS, endpoint reachability, and RFC 9728 authorization_servers[] it references, or compare two issuers under identical limits.
Tools in this application
Discovery Check
discovery_check
discovery_check
Discovery Compare
discovery_compare
discovery_compare
0USD
Free to use with fair-use rate limits.
Auth Discovery Check questions
Scope and boundaries for Auth Discovery Check.
01What does Auth Discovery Check actually check?
Validate a public OIDC/OAuth issuer or remote MCP server's discovery-document family — the openid-configuration (OIDC Discovery 1.0), oauth-authorization-server (RFC 8414), and oauth-protected-resource (RFC 9728) well-known documents — against a pinned spec profile, then live-traverse the JWKS, endpoint reachability, and RFC 9728 authorization_servers[] it references, or compare two issuers under identical limits.
02What does it never do?
It reports what its pinned engine measured and nothing more — it does not judge quality, correctness of your underlying business decisions, or anything outside its stated scope, and it never fabricates a result.
03What does it cost?
Nothing. Every published app is free to use with fair-use rate limits.
04Can my assistant connect directly?
Yes — any MCP-compatible assistant can connect straight to the canonical endpoint: https://powmcp.com/auth-discovery-check/mcp. Marketplace listings are conveniences over the same live engine.