[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",38,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","8fc62aca-f6b7-11f0-b9fd-42dde27851f2","name","fileType","http","content","// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const baseUrl = url.searchParams.get(\"baseUrl\") || \"\";\n const targetUrl = new URL(baseUrl || req.url);\n\n // Define MCP and OAuth metadata endpoint templates\n\n // Function to generate OAuth/OIDC endpoints from authorization server URL\n function generateOAuthEndpoints(authServerUrl: string) {\n const authUrl = new URL(authServerUrl);\n return [\n {\n name: \"OAuth Authorization Server (from extracted)\",\n path: \"/.well-known/oauth-authorization-server\" + authUrl.pathname,\n origin: authUrl.origin,\n },\n {\n name: \"OpenID Configuration (from extracted)\",\n path: authUrl.pathname + \"/.well-known/openid-configuration\",\n origin: authUrl.origin,\n },\n\n {\n name: \"OAuth Authorization Server (from extracted)\",\n path: \"/.well-known/oauth-authorization-server\",\n origin: authUrl.origin,\n },\n {\n name: \"OpenID Configuration (from extracted)\",\n path: \"/.well-known/openid-configuration\",\n origin: authUrl.origin,\n },\n ];\n }\n\n const endpoints = [\n {\n name: \"MCP PRM root\",\n path: `/.well-known/oauth-protected-resource${targetUrl.pathname}`,\n extract: \"authorization_server\",\n },\n ];\n\n let extra = [];\n\n // Items can be either a result or a message\n type ResultItem = {\n type: \"result\";\n name: string;\n path?: string;\n fullUrl: string;\n isLive: boolean;\n data?: any;\n status?: number;\n error?: string;\n };\n type MessageItem = {\n type: \"message\";\n text: string;\n };\n type ButtonItem = {\n type: \"button\";\n text: string;\n action: string;\n };\n type DisplayItem = ResultItem | MessageItem | ButtonItem;\n\n let displayItems: DisplayItem[] = [];\n\n async function fetchEndpoint(\n endpoint: { name: string; path: string; extract?: string; origin?: string },\n ): Promise {\n let origin = targetUrl.origin;\n if (endpoint.origin) {\n origin = endpoint.origin;\n }\n const fullUrl = origin + endpoint.path;\n try {\n const response = await fetch(fullUrl, {\n method: \"GET\",\n headers: { \"Accept\": \"application/json\" },\n });\n const isLive = response.ok;\n let data = null;\n if (isLive) {\n const text = await response.text();\n try {\n data = JSON.parse(text);\n } catch {\n data = text;\n }\n\n if (endpoint.extract === \"authorization_server\") {\n const extracted = data[\"authorization_servers\"]?.[0];\n if (extracted) {\n extra = extra.concat(generateOAuthEndpoints(extracted));\n }\n }\n }\n return {\n type: \"result\",\n ...endpoint,\n fullUrl,\n isLive,\n data,\n status: response.status,\n };\n } catch (error) {\n return {\n type: \"result\",\n ...endpoint,\n fullUrl,\n isLive: false,\n error: error.message,\n };\n }\n }\n\n if (baseUrl) {\n // Step 1: Send MCP Initialize POST to get WWW-Authenticate header with resource_metadata\n const mcpInitBody = {\n jsonrpc: \"2.0\",\n id: 1,\n method: \"initialize\",\n params: {\n protocolVersion: \"2025-03-26\",\n capabilities: {},\n clientInfo: {\n name: \"OAuth Metadata Explorer\",\n version: \"1.0.0\"\n }\n }\n };\n\n let resourceMetadataUrl: string | null = null;\n\n try {\n const initResponse = await fetch(targetUrl.href, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Accept\": \"application/json\"\n },\n body: JSON.stringify(mcpInitBody),\n redirect: \"manual\",\n });\n\n const wwwAuth = initResponse.headers.get(\"www-authenticate\");\n const initData = {\n \"status\": initResponse.status,\n \"statusText\": initResponse.statusText,\n \"www-authenticate\": wwwAuth,\n };\n\n // Parse resource_metadata from WWW-Authenticate header\n if (wwwAuth) {\n const resourceMetadataMatch = wwwAuth.match(/resource_metadata=\"([^\"]+)\"/);\n if (resourceMetadataMatch) {\n resourceMetadataUrl = resourceMetadataMatch[1];\n }\n }\n\n displayItems.push({\n type: \"result\",\n name: \"MCP Initialize POST (checking for WWW-Authenticate)\",\n fullUrl: targetUrl.href,\n isLive: true,\n data: initData,\n status: initResponse.status,\n });\n\n if (wwwAuth && resourceMetadataUrl) {\n displayItems.push({\n type: \"message\",\n text: `✓ Found resource_metadata in WWW-Authenticate header: ${resourceMetadataUrl}`,\n });\n\n // Fetch the resource metadata URL\n const prmEndpoint = {\n name: \"Protected Resource Metadata (from WWW-Authenticate)\",\n path: new URL(resourceMetadataUrl).pathname,\n origin: new URL(resourceMetadataUrl).origin,\n extract: \"authorization_server\",\n };\n const prmResult = await fetchEndpoint(prmEndpoint);\n displayItems.push(prmResult);\n\n } else if (wwwAuth) {\n displayItems.push({\n type: \"message\",\n text: `⚠ Found WWW-Authenticate header but no resource_metadata parameter: ${wwwAuth}`,\n });\n // Fall back to well-known PRM location\n displayItems.push({\n type: \"message\",\n text: \"Falling back to well-known PRM location...\",\n });\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n } else {\n displayItems.push({\n type: \"message\",\n text: \"⚠ No WWW-Authenticate header in response. Trying well-known PRM location...\",\n });\n\n // Fall back to well-known PRM location\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n }\n } catch (error) {\n displayItems.push({\n type: \"result\",\n name: \"MCP Initialize POST\",\n fullUrl: targetUrl.href,\n isLive: false,\n error: error.message,\n });\n\n displayItems.push({\n type: \"message\",\n text: \"Failed to connect. Trying well-known PRM location...\",\n });\n\n // Fall back to well-known PRM location\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n }\n\n if (extra.length > 0) {\n const extraResults = await Promise.all(\n extra.map(fetchEndpoint),\n );\n displayItems = displayItems.concat(extraResults);\n }\n }\n\n function renderItem(item: DisplayItem, idx: number): string {\n if (item.type === \"message\") {\n return `

${item.text}

`;\n }\n\n if (item.type === \"button\") {\n return `

`;\n }\n\n const result = item;\n return `\n

${result.name}

${result.fullUrl}

\n \n ${\n result.isLive\n ? `✓ Live (${result.status})`\n : `✗ Offline${result.status ? ` (${result.status})` : \"\"}`\n }\n \n

\n ${\n result.isLive\n ? `\n

${\n          typeof result.data === \"object\"\n            ? JSON.stringify(result.data, null, 2)\n            : result.data\n        }

\n `\n : result.error\n ? `\n

Error: ${result.error}

\n `\n : \"\"\n }\n

\n `;\n }\n\n const html = `\n\n\n\n MCP & OAuth Metadata Explorer\n \n\n\n

🔍 MCP & OAuth Metadata Explorer

\n \n \n\n ${\n baseUrl\n ? `\n

Results for: `${baseUrl}`, ${targetUrl.pathname}

\n ${displayItems.map((item, idx) => renderItem(item, idx)).join(\"\")}\n `\n : \"

Enter a base URL above to check for MCP and OAuth metadata endpoints.

\"\n }\n\n \n\n\n `;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n}","// Learn more: https://docs.val.town/vals/http/\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const baseUrl = url.searchParams.get(\"baseUrl\") || \"\";\n const targetUrl = new URL(baseUrl || req.url);\n\n // Define MCP and OAuth metadata endpoint templates\n\n // Function to generate OAuth/OIDC endpoints from authorization server URL\n function generateOAuthEndpoints(authServerUrl: string) {\n const authUrl = new URL(authServerUrl);\n return [\n {\n name: \"OAuth Authorization Server (from extracted)\",\n path: \"/.well-known/oauth-authorization-server\" + authUrl.pathname,\n origin: authUrl.origin,\n },\n {\n name: \"OpenID Configuration (from extracted)\",\n path: authUrl.pathname + \"/.well-known/openid-configuration\",\n origin: authUrl.origin,\n },\n\n {\n name: \"OAuth Authorization Server (from extracted)\",\n path: \"/.well-known/oauth-authorization-server\",\n origin: authUrl.origin,\n },\n {\n name: \"OpenID Configuration (from extracted)\",\n path: \"/.well-known/openid-configuration\",\n origin: authUrl.origin,\n },\n ];\n }\n\n const endpoints = [\n {\n name: \"MCP PRM root\",\n path: `/.well-known/oauth-protected-resource${targetUrl.pathname}`,\n extract: \"authorization_server\",\n },\n ];\n\n let extra = [];\n\n // Items can be either a result or a message\n type ResultItem = {\n type: \"result\";\n name: string;\n path?: string;\n fullUrl: string;\n isLive: boolean;\n data?: any;\n status?: number;\n error?: string;\n };\n type MessageItem = {\n type: \"message\";\n text: string;\n };\n type ButtonItem = {\n type: \"button\";\n text: string;\n action: string;\n };\n type DisplayItem = ResultItem | MessageItem | ButtonItem;\n\n let displayItems: DisplayItem[] = [];\n\n async function fetchEndpoint(\n endpoint: { name: string; path: string; extract?: string; origin?: string },\n ): Promise {\n let origin = targetUrl.origin;\n if (endpoint.origin) {\n origin = endpoint.origin;\n }\n const fullUrl = origin + endpoint.path;\n try {\n const response = await fetch(fullUrl, {\n method: \"GET\",\n headers: { \"Accept\": \"application/json\" },\n });\n const isLive = response.ok;\n let data = null;\n if (isLive) {\n const text = await response.text();\n try {\n data = JSON.parse(text);\n } catch {\n data = text;\n }\n\n if (endpoint.extract === \"authorization_server\") {\n const extracted = data[\"authorization_servers\"]?.[0];\n if (extracted) {\n extra = extra.concat(generateOAuthEndpoints(extracted));\n }\n }\n }\n return {\n type: \"result\",\n ...endpoint,\n fullUrl,\n isLive,\n data,\n status: response.status,\n };\n } catch (error) {\n return {\n type: \"result\",\n ...endpoint,\n fullUrl,\n isLive: false,\n error: error.message,\n };\n }\n }\n\n if (baseUrl) {\n // Step 1: Send MCP Initialize POST to get WWW-Authenticate header with resource_metadata\n const mcpInitBody = {\n jsonrpc: \"2.0\",\n id: 1,\n method: \"initialize\",\n params: {\n protocolVersion: \"2025-03-26\",\n capabilities: {},\n clientInfo: {\n name: \"OAuth Metadata Explorer\",\n version: \"1.0.0\"\n }\n }\n };\n\n let resourceMetadataUrl: string | null = null;\n\n try {\n const initResponse = await fetch(targetUrl.href, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Accept\": \"application/json\"\n },\n body: JSON.stringify(mcpInitBody),\n redirect: \"manual\",\n });\n\n const wwwAuth = initResponse.headers.get(\"www-authenticate\");\n const initData = {\n \"status\": initResponse.status,\n \"statusText\": initResponse.statusText,\n \"www-authenticate\": wwwAuth,\n };\n\n // Parse resource_metadata from WWW-Authenticate header\n if (wwwAuth) {\n const resourceMetadataMatch = wwwAuth.match(/resource_metadata=\"([^\"]+)\"/);\n if (resourceMetadataMatch) {\n resourceMetadataUrl = resourceMetadataMatch[1];\n }\n }\n\n displayItems.push({\n type: \"result\",\n name: \"MCP Initialize POST (checking for WWW-Authenticate)\",\n fullUrl: targetUrl.href,\n isLive: true,\n data: initData,\n status: initResponse.status,\n });\n\n if (wwwAuth && resourceMetadataUrl) {\n displayItems.push({\n type: \"message\",\n text: `✓ Found resource_metadata in WWW-Authenticate header: ${resourceMetadataUrl}`,\n });\n\n // Fetch the resource metadata URL\n const prmEndpoint = {\n name: \"Protected Resource Metadata (from WWW-Authenticate)\",\n path: new URL(resourceMetadataUrl).pathname,\n origin: new URL(resourceMetadataUrl).origin,\n extract: \"authorization_server\",\n };\n const prmResult = await fetchEndpoint(prmEndpoint);\n displayItems.push(prmResult);\n\n } else if (wwwAuth) {\n displayItems.push({\n type: \"message\",\n text: `⚠ Found WWW-Authenticate header but no resource_metadata parameter: ${wwwAuth}`,\n });\n // Fall back to well-known PRM location\n displayItems.push({\n type: \"message\",\n text: \"Falling back to well-known PRM location...\",\n });\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n } else {\n displayItems.push({\n type: \"message\",\n text: \"⚠ No WWW-Authenticate header in response. Trying well-known PRM location...\",\n });\n\n // Fall back to well-known PRM location\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n }\n } catch (error) {\n displayItems.push({\n type: \"result\",\n name: \"MCP Initialize POST\",\n fullUrl: targetUrl.href,\n isLive: false,\n error: error.message,\n });\n\n displayItems.push({\n type: \"message\",\n text: \"Failed to connect. Trying well-known PRM location...\",\n });\n\n // Fall back to well-known PRM location\n const prmResult = await fetchEndpoint(endpoints[0]);\n displayItems.push(prmResult);\n\n if (!prmResult.isLive) {\n displayItems.push({\n type: \"message\",\n text: \"No Protected Resource Metadata found, checking for legacy OAuth metadata file\",\n });\n const legacyEndpoint = {\n name: \"Legacy OAuth Authorization Server (root)\",\n path: \"/.well-known/oauth-authorization-server\",\n };\n const legacyResult = await fetchEndpoint(legacyEndpoint);\n displayItems.push(legacyResult);\n }\n }\n\n if (extra.length > 0) {\n const extraResults = await Promise.all(\n extra.map(fetchEndpoint),\n );\n displayItems = displayItems.concat(extraResults);\n }\n }\n\n function renderItem(item: DisplayItem, idx: number): string {\n if (item.type === \"message\") {\n return `

${item.text}

`;\n }\n\n if (item.type === \"button\") {\n return `

`;\n }\n\n const result = item;\n return `\n

${result.name}

${result.fullUrl}

\n \n ${\n result.isLive\n ? `✓ Live (${result.status})`\n : `✗ Offline${result.status ? ` (${result.status})` : \"\"}`\n }\n \n

\n ${\n result.isLive\n ? `\n

${\n          typeof result.data === \"object\"\n            ? JSON.stringify(result.data, null, 2)\n            : result.data\n        }

\n `\n : result.error\n ? `\n

Error: ${result.error}

\n `\n : \"\"\n }\n

\n `;\n }\n\n const html = `\n\n\n\n MCP & OAuth Metadata Explorer\n \n\n\n

🔍 MCP & OAuth Metadata Explorer

\n \n \n\n ${\n baseUrl\n ? `\n

Results for: `${baseUrl}`, ${targetUrl.pathname}

\n ${displayItems.map((item, idx) => renderItem(item, idx)).join(\"\")}\n `\n : \"

Enter a base URL above to check for MCP and OAuth metadata endpoints.

\"\n }\n\n \n\n\n `;\n\n return new Response(html, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n}","createdAt",["D",1769451054797],"branchVersion","branchId","8fc40772-f6b7-11f0-b9fd-42dde27851f2","id","8fc39e7c-f6b7-11f0-b9fd-42dde27851f2","oauth-metadata-exploder",["D",1768992869986],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1d3af61b-92b3-4fbf-b22a-ca08b2122f4d","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned",43,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pcarleton","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":150,"_78":151,"_80":152,"_82":25},"tree",[144],"files",[144],"counts",{"_133":60,"_134":135,"_136":60,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"5b336b86-fae2-11f0-bdb0-42dde27851f2","parentId","latest",["D",1769451054797],37,"label",[28],"pulls","branches",2,"forks","envVars",{"_141":60,"_143":60},"connections",{"_141":60,"_142":60},"count","unfilledCount","emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":145,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_146":147,"_27":148},["D",1769451054797],"children",[],[28],["D",1768992869986],{"_94":93,"_101":97},{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},{"_13":83,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_76":-5,"_122":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":120,"_195":-5,"_196":-7,"_197":-7,"_198":60,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":84,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🔍 MCP & OAuth Metadata Explorer

Results for: ${baseUrl}, ${targetUrl.pathname}

🔍 MCP & OAuth Metadata Explorer

Results for: ${baseUrl}, ${targetUrl.pathname}

Results for: `${baseUrl}`, ${targetUrl.pathname}

Results for: `${baseUrl}`, ${targetUrl.pathname}

Diff · v38