MCP Observatory
4m ago Tracked 59,449 Last 4m ago 24h 2,443
github TypeScript analyzed 78f13bd

AuthPlane/ts-sdk

github

TypeScript SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, FastMCP).

maintainer
AuthPlane
licence
Apache-2.0
first seen
2026-06-16
last seen
2026-08-29
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 7 tools
transport streamable-http · http counts 7 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • add
  • consent_demo
  • debug_client_credentials
  • debug_exchange_token
  • debug_introspect_token
  • debug_verify_dpop_proof
  • multiply
code evidence vv0.4.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 165

filesystem 9

  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/catalogAlignment.test.ts :1 import { existsSync, readFileSync } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/conformanceCase.ts :2 import { appendFileSync, mkdirSync } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/report.ts :8 } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/reportWrite.test.ts :8 } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/scripts/check-auth-leaf.mjs :13 import { readdirSync, readFileSync, statSync } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/conformanceCaseCoverage.test.ts :8 import { readFileSync } from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/scripts/release/set-package-versions.mjs :16 import fs from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/scripts/release/verify-changelog-unreleased.mjs :5 import fs from "node:fs";
  • fs (weak) AuthPlane-ts-sdk-78f13bd/scripts/sync-package-files.mjs :1 import { copyFileSync, existsSync } from "node:fs";

network 23

  • net AuthPlane-ts-sdk-78f13bd/packages/fastmcp/src/auth.ts :2 import type { IncomingMessage } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/fastmcp/tests/auth.integration.test.ts :1 import net from "node:net";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/hono/tests/auth.integration.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/helpers.ts :1 import type { AddressInfo } from "node:net";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/conformance-tests/test_jwt_and_dpop_conformance.test.ts :1 import type { AddressInfo } from "node:net";
  • net AuthPlane-ts-sdk-78f13bd/packages/sdk/src/auth/oauth/http.ts :70 const response = await fetch(options.url, {
  • net AuthPlane-ts-sdk-78f13bd/packages/sdk/src/core/client.ts :132 return new JWKSCache(() => jwksFetcher.fetch(), this.jwksRefreshSeconds);
  • net AuthPlane-ts-sdk-78f13bd/packages/sdk/src/core/fetching/documentFetcher.ts :32 public async fetch(): Promise<FetchResult<TDocument>> {
  • net AuthPlane-ts-sdk-78f13bd/packages/sdk/src/shared/ssrf.ts :2 import type { IncomingHttpHeaders } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/clientBranches.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/clientMoreBranches.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/clientUnit.test.ts :1 import { createServer } from "node:http";
show 11 more
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/documentFetcher.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/dpopNonce.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/introspection.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/introspectionCheckerBranches.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/issuerIdentity.test.ts :1 import { createServer, type Server } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/oauthHttp.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/oauthProtocolUnitConformance.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/ssrfSafeFetch.test.ts :1 import { createServer, type IncomingMessage } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/tokenExchangeBranches.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/tokenExchangeForm.test.ts :1 import { createServer } from "node:http";
  • net (weak) AuthPlane-ts-sdk-78f13bd/packages/sdk/tests/core/verifier.test.ts :2 import { createServer, type Server } from "node:http";

secrets 4

  • secrets AuthPlane-ts-sdk-78f13bd/packages/fastmcp/demo/mcpserver.ts :44 process.env.AUTHPLANE_CLIENT_SECRET ?? process.env.CLIENT_SECRET ?? "",
  • secrets AuthPlane-ts-sdk-78f13bd/packages/hono/demo/server.ts :63 process.env.AUTHPLANE_CLIENT_SECRET ?? process.env.CLIENT_SECRET ?? "";
  • secrets AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :53 process.env.AUTHPLANE_CLIENT_SECRET ?? process.env.CLIENT_SECRET ?? "",
  • secrets AuthPlane-ts-sdk-78f13bd/packages/nestjs/demo/server.ts :76 process.env.AUTHPLANE_CLIENT_SECRET ?? process.env.CLIENT_SECRET ?? "";

tool registrations 9

  • add AuthPlane-ts-sdk-78f13bd/packages/fastmcp/demo/mcpserver.ts :56
  • multiply AuthPlane-ts-sdk-78f13bd/packages/fastmcp/demo/mcpserver.ts :64
  • add AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :70
  • multiply AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :75
  • consent_demo AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :95
  • debug_client_credentials AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :123
  • debug_introspect_token AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :133
  • debug_exchange_token AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :143
  • debug_verify_dpop_proof AuthPlane-ts-sdk-78f13bd/packages/mcp/demo/mcpserver.ts :162

install hooks 5

  • prepack AuthPlane-ts-sdk-78f13bd/packages/fastmcp/package.json :43 node ../../scripts/sync-package-files.mjs
  • prepack AuthPlane-ts-sdk-78f13bd/packages/hono/package.json :42 node ../../scripts/sync-package-files.mjs
  • prepack AuthPlane-ts-sdk-78f13bd/packages/mcp/package.json :43 node ../../scripts/sync-package-files.mjs
  • prepack AuthPlane-ts-sdk-78f13bd/packages/nestjs/package.json :42 node ../../scripts/sync-package-files.mjs
  • prepack AuthPlane-ts-sdk-78f13bd/packages/sdk/package.json :47 node ../../scripts/sync-package-files.mjs

declared dependencies 1

  • @biomejs/biome@^2.4.9