🔐
AB-023

MCP Auth Discovery

🔐 Bot Authentication Pillar: Executability Moderate effort Severity: medium Est. cost: $10-50 Gap: capability Fix: manual

What it means

Your MCP server's authentication info is discoverable by agents.

Why it matters

Agents need to find auth info before connecting to your MCP server. Without discovery, they can't authenticate.

Evidence expected

This rule is verified by:

http html Source: Website content
✗

What's wrong

MCP server requires auth but doesn't publish how to get it.

✓

What's right

Auth discovery is available, so agents know how to authenticate.

Check this rule on your site

Enter your URL to check just this one rule (AB-001).

Related rules in Bot Authentication

✍️ Bot Signatures Directory
👥 Bot Directory Members
🔑 Bot Public Keys
🛡️ Protected Resource Metadata
📜 Web Bot Auth Directory
← Back to all rules

Machine-Readable

This rule is also available as JSON: /rules/AB-023.json

Explore More

  • All Rules

    Browse the complete rules catalog

  • Agent Guide

    Learn how to fix this rule

  • Blog

    Related articles on agent readiness