[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_257":258,"_259":260},"routes/_app.x.$handle.$name",{"_104":103,"_37":49,"_112":94,"_32":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_26":-5,"_124":-5,"_125":-5,"_126":30,"_127":128,"_129":63,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_47":48,"_37":49,"_42":50,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":30},"version",139,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","1eaf5691-14a4-4399-91f2-1633592cce50","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":33,"_38":39,"_40":41,"_42":43,"_44":14,"_45":46,"_29":30},"previous","deleted",false,"deletedHere","path","code-tour.tsx","latestPath","fileId","eaf0f77a-a578-11f1-8fe4-1607ee4eb77e","name","fileType","script","content","// Code tour — each chapter shows a simplified snippet with per-line explanations.\n// Highlighting is done server-side with Shiki (one call per chapter, whole snippet\n// at a time) so multi-line constructs tokenize correctly, unlike per-line Prism.\n\ntype Line = { code: string; why: string; comment?: boolean };\ntype Step = { title: string; act: string; why: string; lines: Line[] };\n\nconst ACT1 = \"Part 1 · Get a client identity\";\nconst ACT2 = \"Part 2 · Trade the code for tokens\";\nconst ACT3 = \"Part 3 · Put the connection to work\";\n\nconst steps: Step[] = [\n { title: \"1. Describe providers\", act: ACT1, why: \"Every connection uses the same MCP and OAuth machinery; only protocol endpoints and capabilities vary.\", lines: [\n { code: \"type Provider = {\", why: \"Define the small configuration shape shared by every provider.\" },\n { code: \" endpoint: string;\", why: \"The provider’s authenticated remote MCP endpoint.\" },\n { code: \" auth: string; token: string; register: string;\", why: \"OAuth authorization, token, and DCR endpoints.\" },\n { code: \" cimd: boolean;\", why: \"Whether the authorization server accepts a metadata-document URL as client_id.\" },\n { code: \"};\", why: \"No provider-specific callback, tool adapter, or token-exchange code is needed.\" },\n ]},\n { title: \"2. Discover more providers\", act: ACT1, why: \"The directory can turn standards metadata into a working connection without adding another config object.\", lines: [\n { code: \"const metadataUrl = entry.cimdUrl ?? entry.dcrUrl;\", why: \"Start from the evidence URL already collected by the directory.\" },\n { code: \"const metadata = await fetch(metadataUrl).then(r => r.json());\", why: \"Read the authorization-server metadata document.\" },\n { code: \"return {\", why: \"Construct the same Provider shape from chapter 1.\" },\n { code: \" auth: metadata.authorization_endpoint,\", why: \"Discover where the browser should authorize.\" },\n { code: \" token: metadata.token_endpoint,\", why: \"Discover where the code is exchanged.\" },\n { code: \" register: metadata.registration_endpoint,\", why: \"Discover DCR support directly from metadata (chapter 4 uses it).\" },\n { code: \"};\", why: \"After this, the rest of the flow is provider-independent.\" },\n ]},\n { title: \"3. Generate PKCE\", act: ACT1, why: \"PKCE binds the browser authorization response to the client that initiated it.\", lines: [\n { code: \"const verifier = b64url(randomBytes(48));\", why: \"Create a high-entropy base64url secret that never leaves the server before the callback.\" },\n { code: \"const challenge = await sha256(verifier);\", why: \"Send only base64url(SHA-256(verifier)) — the hash, never the secret.\" },\n { code: \"const state = crypto.randomUUID();\", why: \"Give this browser flow an unpredictable lookup key.\" },\n { code: \"await save({ state, verifier, provider });\", why: \"Persist the verifier and provider until the callback returns.\" },\n ]},\n { title: \"4. Register with DCR\", act: ACT1, why: \"DCR creates a client at runtime, eliminating the developer-portal setup step.\", lines: [\n { code: \"const client = await fetch(provider.register, {\", why: \"POST to the registration endpoint advertised in chapter 2.\" },\n { code: \" method: \\\"POST\\\",\", why: \"Registration is a state-changing protocol operation.\" },\n { code: \" body: JSON.stringify({\", why: \"Send standard OAuth client metadata.\" },\n { code: \" redirect_uris: [callbackUrl],\", why: \"The provider may redirect only to this callback.\" },\n { code: \" token_endpoint_auth_method: \\\"none\\\",\", why: \"This public client relies on PKCE (chapter 3) rather than a durable client secret.\" },\n { code: \" }),\", why: \"The same document works across compliant providers.\" },\n { code: \"}).then(r => r.json());\", why: \"The response supplies the newly created client_id.\" },\n ]},\n { title: \"5. Identify with CIMD\", act: ACT1, why: \"CIMD removes even the registration POST from chapter 4: the client_id is a URL containing the client metadata.\", lines: [\n { code: \"app.get(\\\"/oauth/client-metadata.json\\\", c => c.json({\", why: \"Host a public metadata document at a stable HTTPS URL.\" },\n { code: \" client_id: origin + \\\"/oauth/client-metadata.json\\\",\", why: \"The document identifies itself.\" },\n { code: \" redirect_uris: [origin + \\\"/oauth/callback\\\"],\", why: \"The authorization server validates callbacks against this document.\" },\n { code: \"}));\", why: \"Providers fetch this document whenever they need current metadata.\" },\n { code: \"const clientId = origin + \\\"/oauth/client-metadata.json\\\";\", why: \"Use that URL directly as client_id — no registration request.\" },\n ]},\n { title: \"6. Authorize\", act: ACT2, why: \"DCR and CIMD converge here; only the source of client_id differs (chapters 4 and 5).\", lines: [\n { code: \"const url = new URL(provider.auth);\", why: \"Start with the discovered authorization endpoint.\" },\n { code: \"url.searchParams.set(\\\"client_id\\\", clientId);\", why: \"Either the DCR-issued ID or the CIMD metadata URL.\" },\n { code: \"url.searchParams.set(\\\"redirect_uri\\\", callbackUrl);\", why: \"Tell the provider where to return the code.\" },\n { code: \"url.searchParams.set(\\\"code_challenge\\\", challenge);\", why: \"Bind this request to the secret PKCE verifier from chapter 3.\" },\n { code: \"url.searchParams.set(\\\"state\\\", state);\", why: \"Bind the callback to the stored flow record.\" },\n { code: \"return redirect(url);\", why: \"The user now grants access on the provider’s site.\" },\n ]},\n { title: \"7. Exchange the code\", act: ACT2, why: \"The callback is identical for DCR and CIMD.\", lines: [\n { code: \"const flow = await load(request.query(\\\"state\\\"));\", why: \"Recover the verifier, client ID, and provider safely.\" },\n { code: \"const token = await fetch(provider.token, {\", why: \"POST the short-lived authorization code to the token endpoint.\" },\n { code: \" body: form({ code, client_id: flow.clientId,\", why: \"Identify the same client used during authorization.\" },\n { code: \" code_verifier: flow.verifier }),\", why: \"Prove this is the client that created the PKCE challenge.\" },\n { code: \"}).then(r => r.json());\", why: \"Receive the access token.\" },\n { code: \"await storeEncrypted(token.access_token);\", why: \"Encrypt the token before storing it in project-scoped SQLite.\" },\n ]},\n { title: \"8. Prove the connection\", act: ACT2, why: \"A successful token exchange is not enough; the app immediately uses the token against every provider’s MCP server.\", lines: [\n { code: \"await mcp(\\\"initialize\\\");\", why: \"Negotiate the MCP protocol version and session.\" },\n { code: \"const tools = await mcp(\\\"tools/list\\\");\", why: \"Fetch authenticated capabilities from the real account.\" },\n { code: \"store(tools);\", why: \"Remember what the connected MCP server actually advertised.\" },\n { code: \"// Val Town follows this same path\", comment: true, why: \"Not a line of code — the same initialize → tools/list path serves every provider, with no hand-written Val Town REST adapter.\" },\n ]},\n { title: \"9. Give tools to the model\", act: ACT3, why: \"Every connected MCP server becomes one namespaced tool collection for the chat model.\", lines: [\n { code: \"for (const service of connectedServices) {\", why: \"Process only services authorized in this browser session.\" },\n { code: \" const tools = await service.listTools();\", why: \"Discover current tool schemas dynamically.\" },\n { code: \" for (const tool of tools) {\", why: \"Convert each MCP tool to an OpenAI function tool.\" },\n { code: \" modelTools.push(namespace(service, tool));\", why: \"Namespacing prevents collisions, such as several search tools.\" },\n { code: \" }\", why: \"No service-specific tool-call implementation is required.\" },\n { code: \"}\", why: \"The model can now choose tools across every connection.\" },\n ]},\n { title: \"10. Render safely\", act: ACT3, why: \"The model returns Markdown, but arbitrary model HTML must not reach the page unsanitized.\", lines: [\n { code: \"const markdown = await askConnectedServices(message);\", why: \"The server returns a concise Markdown answer with source links.\" },\n { code: \"const html = marked.parse(markdown);\", why: \"Turn Markdown into readable lists and links.\" },\n { code: \"answer.innerHTML = DOMPurify.sanitize(html);\", why: \"Remove unsafe markup before inserting it into the DOM.\" },\n ]},\n];\n\n// --- Server-side highlighting (Shiki) -------------------------------------\n\nimport { createHighlighter } from \"npm:shiki@3/core\";\nimport typescript from \"npm:shiki@3/langs/typescript.mjs\";\nimport vesper from \"npm:shiki@3/themes/vesper.mjs\";\n\nconst highlighter = await createHighlighter({ themes: [vesper], langs: [typescript] });\n\nconst esc = (s: string) => s.replaceAll(\"&\", \"&\").replaceAll(\"<\", \"<\").replaceAll(\">\", \">\").replaceAll('\"', \""\");\n\n// Highlight each chapter's snippet as one block, then split back into lines so\n// every line can still be clicked individually.\nfunction highlightLines(step: Step): string[] {\n const source = step.lines.map((l) => l.code).join(\"\\n\");\n const { tokens } = highlighter.codeToTokens(source, { lang: \"typescript\", theme: \"vesper\" });\n return tokens.map((line) =>\n line.map((t) => {\n const style = t.fontStyle === 1 ? \"color:\" + t.color + \";font-style:italic\"\n : t.fontStyle === 2 ? \"color:\" + t.color + \";text-decoration:underline\"\n : t.fontStyle === 4 ? \"color:\" + t.color + \";font-weight:700\"\n : \"color:\" + t.color;\n return `${esc(t.content)}`;\n }).join(\"\")\n );\n}\n\nlet cached: string[] | null = null;\nfunction stepLineHtml() {\n if (!cached) cached = steps.map(highlightLines);\n return cached;\n}\n\n// --- Page -------------------------------------------------------------------\n\nexport function codeTourPage() {\n const highlighted = stepLineHtml();\n const acts = [...new Set(steps.map((s) => s.act))];\n const nav = acts.map((act) =>\n `

${esc(act)}

` +\n steps.map((s, i) => ({ s, i })).filter(({ s }) => s.act === act)\n .map(({ i }) => ``)\n .join(\"\")\n ).join(\"\");\n\n const panels = steps.map((s, i) => {\n const lines = s.lines.map((l, n) => {\n const num = `${n + 1}`;\n const body = `${highlighted[i][n]}`;\n return l.comment\n ? `

${num}${body}

`\n : ``;\n }).join(\"\");\n return `

` +\n `

Step ${i + 1} of ${steps.length} · ${esc(s.act)}

` +\n `

${esc(s.title)}

${esc(s.why)}

` +\n `

${lines}

` +\n `` +\n `

`;\n }).join(\"\");\n\n return `How this Val works

← Back to the app

How every line works

A guided tour of the essential code, simplified to expose the protocol rather than the page styling. Choose a chapter, then click any line for its explanation. Use ← → for chapters and ↑ ↓ to walk the lines.

${panels}

`;\n}","createdAt",["D",1788207418119],"branchVersion","branchId","335dc83e-9b3b-4975-8589-410ed38c6433","id","7825587f-b4d7-43b6-a446-ce740ea520e5","oauth-demos",["D",1784744701880],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Connect to all the apps with OAuth DCR + CIMD","imageUrl","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","a74a3cae-85fa-11f1-942c-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","7825587fb4d743b6a446ce740ea520e5","tursoHostname","7825587fb4d743b6a446ce740ea520e5-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789560070146],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":107},"org",{"_104":103,"_105":-5,"_106":107,"_19":59,"_108":109,"_110":30},"branch",{"_13":93,"_37":94,"_47":46,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":49,"_102":103},"isOwned",178,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","stevekrouse","handle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_37":49,"_42":252,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":253,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":254,"_88":255,"_90":256,"_92":30},"tree",[205,208,209,210,211,212,213],"files",[205,206,207,208,209,210,211,212,213],"counts",{"_195":162,"_196":67,"_197":169,"_198":199,"_200":201},"contents",[134,135,136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_47":188,"_37":189,"_35":190,"_143":-5,"_45":46,"_44":191,"_145":63,"_42":192,"_13":162,"_38":193,"_40":-5,"_29":30,"_150":-5,"_32":194},{"_47":180,"_37":181,"_35":182,"_143":-5,"_45":46,"_44":183,"_145":30,"_42":184,"_13":185,"_38":26,"_40":186,"_29":30,"_150":-5,"_32":187},{"_47":172,"_37":173,"_35":174,"_143":-5,"_45":46,"_44":175,"_145":30,"_42":176,"_13":177,"_38":26,"_40":178,"_29":30,"_150":-5,"_32":179},{"_47":164,"_37":165,"_35":166,"_143":-5,"_45":46,"_44":167,"_145":30,"_42":168,"_13":169,"_38":39,"_40":170,"_29":30,"_150":-5,"_32":171},{"_47":160,"_37":33,"_35":36,"_143":-5,"_45":46,"_44":14,"_145":30,"_42":161,"_13":162,"_38":39,"_40":41,"_29":30,"_150":-5,"_32":163},{"_47":152,"_37":153,"_35":154,"_143":-5,"_45":46,"_44":155,"_145":30,"_42":156,"_13":157,"_38":39,"_40":158,"_29":30,"_150":-5,"_32":159},{"_47":141,"_37":142,"_35":61,"_143":-5,"_45":46,"_44":144,"_145":30,"_42":146,"_13":147,"_38":148,"_40":149,"_29":30,"_150":49,"_32":151},"6e689a1d-a0ee-4b84-9dc8-8f31e2f58b47","main.tsx","parentId",138,"latest",["D",1788207265185],113,"http","/** @jsxImportSource https://esm.sh/hono/jsx */\nimport { Hono } from \"https://esm.sh/hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { OpenAI } from \"https://esm.town/v/std/openai/main.ts\";\nimport { directoryEntries } from \"./directory-data.ts\";\nimport { codeTourPage } from \"./code-tour.tsx\";\n\nconst app = new Hono();\nlet cachedTokenKey: CryptoKey | null = null;\n\nasync function tokenKey() {\n if (cachedTokenKey) return cachedTokenKey;\n const blobKey = \"mcp-token-encryption-key:v1\";\n let material = await blob.getJSON(blobKey) as string | null;\n if (!material) {\n material = btoa(String.fromCharCode(...crypto.getRandomValues(new Uint8Array(32))));\n await blob.setJSON(blobKey, material);\n }\n const hash = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(material));\n cachedTokenKey = await crypto.subtle.importKey(\"raw\", hash, {name:\"AES-GCM\"}, false, [\"encrypt\",\"decrypt\"]);\n return cachedTokenKey;\n}\n\nasync function encryptToken(data:string) {\n const iv=crypto.getRandomValues(new Uint8Array(12));\n const encrypted=await crypto.subtle.encrypt({name:\"AES-GCM\",iv},await tokenKey(),new TextEncoder().encode(data));\n const bytes=new Uint8Array(12+encrypted.byteLength);\n bytes.set(iv); bytes.set(new Uint8Array(encrypted),12);\n return b64url(bytes);\n}\n\nasync function decryptToken(data:string) {\n try {\n const raw=data.replaceAll(\"-\",\"+\").replaceAll(\"_\",\"/\");\n const bytes=Uint8Array.from(atob(raw),(c)=>c.charCodeAt(0));\n const decrypted=await crypto.subtle.decrypt({name:\"AES-GCM\",iv:bytes.slice(0,12)},await tokenKey(),bytes.slice(12));\n return new TextDecoder().decode(decrypted);\n } catch { throw new Error(\"This connection uses an expired encryption key. Please reconnect it.\"); }\n}\nconst enc = new TextEncoder();\nconst b64url = (b: Uint8Array) => btoa(String.fromCharCode(...b)).replaceAll(\"+\",\"-\").replaceAll(\"/\",\"_\").replaceAll(\"=\",\"\");\nconst sha256 = async (s: string) => b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(s))));\nconst esc = (s: unknown) => String(s ?? \"\").replaceAll(\"&\",\"&\").replaceAll(\"<\",\"<\").replaceAll(\">\",\">\").replaceAll('\"',\""\");\nconst cookie = (req: Request, name: string) => (req.headers.get(\"cookie\") || \"\").split(\";\").map(x=>x.trim()).find(x=>x.startsWith(name+\"=\"))?.slice(name.length+1);\n\ntype Provider = {\n name:string; key:string; endpoint:string; auth:string; token:string; register:string;\n scope:string; cimd:boolean; authMethod:\"none\"|\"client_secret_post\";\n};\n\nconst providers: Provider[] = [\n {name:\"Val Town\",key:\"valtown\",endpoint:\"https://api.val.town/v3/mcp\",auth:\"https://www.val.town/oauth/auth\",token:\"https://www.val.town/oauth/token\",register:\"https://www.val.town/oauth/reg\",scope:\"openid offline_access profile user_r project_rw\",cimd:false,authMethod:\"none\"},\n {name:\"Notion\",key:\"notion\",endpoint:\"https://mcp.notion.com/mcp\",auth:\"https://mcp.notion.com/authorize\",token:\"https://mcp.notion.com/token\",register:\"https://mcp.notion.com/register\",scope:\"\",cimd:true,authMethod:\"none\"},\n {name:\"Linear\",key:\"linear\",endpoint:\"https://mcp.linear.app/mcp\",auth:\"https://mcp.linear.app/authorize\",token:\"https://mcp.linear.app/token\",register:\"https://mcp.linear.app/register\",scope:\"read openid email\",cimd:true,authMethod:\"none\"},\n {name:\"Sentry\",key:\"sentry\",endpoint:\"https://mcp.sentry.dev/mcp\",auth:\"https://mcp.sentry.dev/oauth/authorize\",token:\"https://mcp.sentry.dev/oauth/token\",register:\"https://mcp.sentry.dev/oauth/register\",scope:\"org:read\",cimd:false,authMethod:\"none\"},\n {name:\"Stripe\",key:\"stripe\",endpoint:\"https://mcp.stripe.com\",auth:\"https://access.stripe.com/mcp/oauth2/authorize\",token:\"https://access.stripe.com/mcp/oauth2/token\",register:\"https://access.stripe.com/mcp/oauth2/register\",scope:\"mcp\",cimd:false,authMethod:\"none\"},\n];\nconst byKey=new Map(providers.map(p=>[p.key,p]));\nconst slug=(name:string)=>name.toLowerCase().replace(/[^a-z0-9]+/g,\"-\").replace(/^-|-$/g,\"\");\nconst providerCache=new Map();\n\nasync function resolveProvider(key:string){\n const configured=byKey.get(key);\n if(configured)return configured;\n if(providerCache.has(key))return providerCache.get(key);\n const entry=directoryEntries.find(x=>slug(x.service)===key);\n const metadataUrl=[entry?.cimdUrl,entry?.dcrUrl].find(x=>x?.includes(\"/.well-known/\"));\n if(!entry?.mcpUrl||!metadataUrl)return undefined;\n const res=await fetch(metadataUrl);\n if(!res.ok)return undefined;\n const metadata=await res.json();\n if(!metadata.authorization_endpoint||!metadata.token_endpoint)return undefined;\n const provider:Provider={\n name:entry.service,key,endpoint:entry.mcpUrl,\n auth:metadata.authorization_endpoint,token:metadata.token_endpoint,\n register:metadata.registration_endpoint||\"\",scope:\"\",cimd:entry.cimd===\"yes\",authMethod:\"none\",\n };\n providerCache.set(key,provider);\n return provider;\n}\n\nasync function init() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mcp_flows (\n state TEXT PRIMARY KEY, provider TEXT NOT NULL, client_id TEXT NOT NULL,\n client_secret TEXT, verifier TEXT NOT NULL, redirect_uri TEXT NOT NULL, created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mcp_connections (\n sid TEXT NOT NULL, provider TEXT NOT NULL, tools TEXT NOT NULL,\n access_token TEXT, connected_at INTEGER NOT NULL, PRIMARY KEY(sid, provider)\n )`);\n try { await sqlite.execute(\"ALTER TABLE mcp_connections ADD COLUMN access_token TEXT\"); } catch {}\n}\n\nasync function parseMcp(res: Response) {\n const text = await res.text();\n if (!res.ok) throw new Error(`MCP returned ${res.status}: ${text.slice(0,160)}`);\n if ((res.headers.get(\"content-type\") || \"\").includes(\"text/event-stream\")) {\n const lines = text.split(\"\\n\").filter(x=>x.startsWith(\"data:\"));\n for (const line of lines) {\n try { return JSON.parse(line.slice(5).trim()); } catch {}\n }\n }\n return JSON.parse(text);\n}\n\nasync function mcpCall(provider: Provider, token: string, method: string, params: any, session?: string) {\n const headers: Record = {\n authorization: \"Bearer \" + token,\n \"content-type\": \"application/json\",\n accept: \"application/json, text/event-stream\",\n };\n if (session) headers[\"mcp-session-id\"] = session;\n const res = await fetch(provider.endpoint, {\n method:\"POST\", headers,\n body:JSON.stringify({jsonrpc:\"2.0\", id:crypto.randomUUID(), method, params}),\n });\n return { data: await parseMcp(res), session: res.headers.get(\"mcp-session-id\") || session };\n}\n\nasync function mcpToolList(provider: Provider, token: string) {\n const initialized = await mcpCall(provider, token, \"initialize\", {\n protocolVersion:\"2025-11-25\",\n capabilities:{},\n clientInfo:{name:\"Connect to all the apps with OAuth DCR + CIMD\",version:\"1.0.0\"},\n });\n try {\n await fetch(provider.endpoint, {\n method:\"POST\",\n headers:{\n authorization:\"Bearer \"+token, \"content-type\":\"application/json\",\n accept:\"application/json, text/event-stream\",\n ...(initialized.session ? {\"mcp-session-id\":initialized.session}:{}),\n },\n body:JSON.stringify({jsonrpc:\"2.0\",method:\"notifications/initialized\"}),\n });\n } catch {}\n const listed = await mcpCall(provider, token, \"tools/list\", {}, initialized.session || undefined);\n return { tools: listed.data?.result?.tools || [], session: listed.session || initialized.session };\n}\n\nasync function authenticatedTools(provider: Provider, token: string) {\n const { tools } = await mcpToolList(provider, token);\n return tools.map((t:any)=>({name:t.name,description:t.description || \"\"}));\n}\n\nasync function mcpToolCall(provider: Provider, token: string, name: string, args: any) {\n const initialized = await mcpCall(provider, token, \"initialize\", {\n protocolVersion:\"2025-11-25\", capabilities:{}, clientInfo:{name:\"Connect to all the apps with OAuth DCR + CIMD\",version:\"1.0.0\"},\n });\n try { await fetch(provider.endpoint,{method:\"POST\",headers:{authorization:\"Bearer \"+token,\"content-type\":\"application/json\",accept:\"application/json, text/event-stream\",...(initialized.session?{\"mcp-session-id\":initialized.session}:{})},body:JSON.stringify({jsonrpc:\"2.0\",method:\"notifications/initialized\"})}); } catch {}\n const called=await mcpCall(provider,token,\"tools/call\",{name,arguments:args},initialized.session||undefined);\n return called.data?.result;\n}\n\nfunction page(_unused:any,connections:any[],error?:string){\n const connected=new Map(connections.map((x:any)=>[x.provider,x]));\n const popular=[\"Notion\",\"Linear\",\"Val Town\",\"Stripe\",\"Sentry\",\"Airtable\",\"Canva\",\"GitLab\",\"Vercel\",\"Intercom\",\"Miro\",\"Hugging Face\",\"Replit\",\"WordPress.com\"];\n const rank=new Map(popular.map((name,i)=>[name,i]));\n const isRunnable=(entry:(typeof directoryEntries)[number])=>{\n const key=entry.service===\"Val Town\"?\"valtown\":slug(entry.service);\n const configured=byKey.has(key);\n const discoverable=Boolean(entry.mcpUrl&&[entry.cimdUrl,entry.dcrUrl].some(x=>x?.includes(\"/.well-known/\")));\n return (configured||discoverable)&&(entry.dcr===\"yes\"||entry.cimd===\"yes\");\n };\n const entries=[...directoryEntries].filter(isRunnable).sort((a,b)=>(rank.get(a.service)??999)-(rank.get(b.service)??999)||a.service.localeCompare(b.service));\n const logoDomains:Record={\n \"Airtable\":\"airtable.com\",\"Amplitude\":\"amplitude.com\",\"Brandfetch\":\"brandfetch.com\",\"Calendly\":\"calendly.com\",\n \"Canva\":\"canva.com\",\"Exa\":\"exa.ai\",\"GitLab\":\"gitlab.com\",\"Hugging Face\":\"huggingface.co\",\n \"Intercom\":\"intercom.com\",\"Jotform\":\"jotform.com\",\"Linear\":\"linear.app\",\"Miro\":\"miro.com\",\n \"Notion\":\"notion.so\",\"Replit\":\"replit.com\",\"Sentry\":\"sentry.io\",\"Sequentum\":\"sequentum.com\",\n \"Stripe\":\"stripe.com\",\"SureSMS\":\"suresms.com\",\"Val Town\":\"val.town\",\"Vercel\":\"vercel.com\",\n \"WordPress.com\":\"wordpress.com\",\n };\n const status=(value:string,url:string|null)=>{\n const label=value===\"yes\"?\"Yes\":value===\"no\"?\"No\":value===\"restricted\"?\"Restricted\":value===\"n/a\"?\"N/A\":\"Unknown\";\n const badge=`${label}`;\n return url&&/^https?:\\/\\//.test(url)?`${badge}`:badge;\n };\n const rows=entries.map(entry=>{\n const key=entry.service===\"Val Town\"?\"valtown\":slug(entry.service),isConnected=connected.has(key);\n const configured=byKey.has(key);\n const discoverable=Boolean(entry.mcpUrl&&[entry.cimdUrl,entry.dcrUrl].some(x=>x?.includes(\"/.well-known/\")));\n const dcr=entry.dcr===\"yes\"&&(configured||discoverable);\n const cimd=entry.cimd===\"yes\"&&(configured||discoverable);\n const protocolCell=(mode:\"dcr\"|\"cimd\",runnable:boolean,value:string,url:string|null)=>{\n if(!runnable)return status(value,url);\n const label=isConnected?\"Reconnect\":\"Connect\";\n const evidence=url&&/^https?:\\/\\//.test(url)?``:\"\";\n return `${label}${evidence}`;\n };\n const logo=\"https://www.google.com/s2/favicons?sz=64&domain=\"+encodeURIComponent(logoDomains[entry.service]||new URL(entry.mcpUrl!).hostname);\n return `\n $\"\"$ ${esc(entry.service)}\n ${protocolCell(\"dcr\",dcr,entry.dcr,entry.dcrUrl)}\n ${protocolCell(\"cimd\",cimd,entry.cimd,entry.cimdUrl)}\n `;\n }).join(\"\");\n const publicCount=entries.length;\n const hasConnections=connections.length>0;\n return `\nConnect to all the apps with OAuth DCR + CIMD

Connect to all the apps with OAuth DCR + CIMD

One client, many services. Connect with Dynamic Client Registration or Client ID Metadata Documents, then ask one question across everything you authorized.

\n${error?`

${esc(error)}

`:\"\"}\n

Chat with your connections

${hasConnections?\"Ask about the services you connected below.\":\"Connect at least one app below to enable chat.\"}

${hasConnections?\"Ask me for the three most recent items from each connected service.\":\"Your connected apps will appear here.\"}

Apps

${rows}

App	DCR	CIMD

Explore the code View source

\n\n

`;\n}\n\napp.get(\"/directory\",c=>c.redirect(\"/#directory\"));\napp.get(\"/code-tour\",c=>c.html(codeTourPage()));\n\napp.get(\"/\", async c => {\n await init();\n const sid=cookie(c.req.raw,\"mcp_demo_sid\");\n let connections:any[]=[];\n if(sid) connections=(await sqlite.execute({sql:\"SELECT provider,tools,connected_at FROM mcp_connections WHERE sid=? AND access_token IS NOT NULL\",args:[sid]})).rows as any[];\n return c.html(page(null,connections,c.req.query(\"error\")));\n});\n\napp.get(\"/oauth/client-metadata.json\",c=>{\n const origin=new URL(c.req.url).origin;\n return c.json({\n client_id:origin+\"/oauth/client-metadata.json\",\n client_name:\"Connect to all the apps with OAuth DCR + CIMD\",\n client_uri:origin,\n redirect_uris:[origin+\"/oauth/callback\"],\n grant_types:[\"authorization_code\",\"refresh_token\"],\n response_types:[\"code\"],\n token_endpoint_auth_method:\"none\",\n });\n});\n\napp.get(\"/oauth/:provider/:mode/start\",async c=>{\n await init();\n const p=await resolveProvider(c.req.param(\"provider\"));\n const mode=c.req.param(\"mode\");\n if(!p||![\"dcr\",\"cimd\"].includes(mode))return c.notFound();\n if(mode===\"cimd\"&&!p.cimd)return c.redirect(\"/?error=\"+encodeURIComponent(p.name+\" does not advertise CIMD.\"));\n try{\n const origin=new URL(c.req.url).origin;\n const redirectUri=origin+\"/oauth/callback\";\n const verifier=b64url(crypto.getRandomValues(new Uint8Array(48)));\n const challenge=await sha256(verifier);\n const state=crypto.randomUUID();\n let client:any={client_id:origin+\"/oauth/client-metadata.json\"};\n if(mode===\"dcr\"){\n const registration={\n client_name:\"Connect to all the apps with OAuth DCR + CIMD\",client_uri:origin,redirect_uris:[redirectUri],\n grant_types:[\"authorization_code\",\"refresh_token\"],response_types:[\"code\"],token_endpoint_auth_method:p.authMethod,\n };\n const rr=await fetch(p.register,{method:\"POST\",headers:{\"content-type\":\"application/json\",\"accept\":\"application/json\"},body:JSON.stringify(registration)});\n const raw=await rr.text();\n if(!rr.ok)throw new Error(`${p.name} registration failed (${rr.status}): ${raw.slice(0,160)}`);\n client=JSON.parse(raw);\n }\n await sqlite.execute({sql:\"INSERT INTO mcp_flows(state,provider,client_id,client_secret,verifier,redirect_uri,created_at) VALUES(?,?,?,?,?,?,?)\",args:[state,p.key,client.client_id,client.client_secret||null,verifier,redirectUri,Date.now()]});\n const q:Record={response_type:\"code\",client_id:client.client_id,redirect_uri:redirectUri,state,code_challenge:challenge,code_challenge_method:\"S256\"};\n q.resource=p.endpoint;\n if(p.scope)q.scope=p.scope;\n return c.redirect(p.auth+\"?\"+new URLSearchParams(q));\n }catch(e){return c.redirect(\"/?error=\"+encodeURIComponent(e instanceof Error?e.message:String(e)))}\n});\n\napp.get(\"/mcp/:provider/start\",c=>c.redirect(\"/oauth/\"+c.req.param(\"provider\")+\"/dcr/start\"));\n\napp.get(\"/oauth/callback\",async c=>{\n await init();\n const state=c.req.query(\"state\")||\"\",code=c.req.query(\"code\")||\"\";\n const flow:any=(await sqlite.execute({sql:\"SELECT * FROM mcp_flows WHERE state=?\",args:[state]})).rows[0];\n if(!flow||!code)return c.redirect(\"/?error=\"+encodeURIComponent(\"OAuth response could not be verified.\"));\n const p=await resolveProvider(flow.provider);\n if(!p)return c.redirect(\"/?error=\"+encodeURIComponent(\"Unknown provider.\"));\n try{\n const form:Record={grant_type:\"authorization_code\",code,client_id:flow.client_id,redirect_uri:flow.redirect_uri,code_verifier:flow.verifier};\n form.resource=p.endpoint;\n if(flow.client_secret)form.client_secret=flow.client_secret;\n const tr=await fetch(p.token,{method:\"POST\",headers:{\"content-type\":\"application/x-www-form-urlencoded\",\"accept\":\"application/json\"},body:new URLSearchParams(form)});\n const raw=await tr.text();\n if(!tr.ok)throw new Error(`${p.name} token exchange failed (${tr.status}): ${raw.slice(0,160)}`);\n const token=JSON.parse(raw);\n const summary=await authenticatedTools(p,token.access_token);\n const encryptedToken=await encryptToken(token.access_token);\n let sid=cookie(c.req.raw,\"mcp_demo_sid\")||crypto.randomUUID();\n await sqlite.batch([\n {sql:\"INSERT OR REPLACE INTO mcp_connections(sid,provider,tools,access_token,connected_at) VALUES(?,?,?,?,?)\",args:[sid,p.key,JSON.stringify(summary),encryptedToken,Date.now()]},\n {sql:\"DELETE FROM mcp_flows WHERE state=?\",args:[state]},\n {sql:\"DELETE FROM mcp_flows WHERE created_at < ?\",args:[Date.now()-3600000]},\n ]);\n return new Response(null,{status:302,headers:{location:\"/\",\"set-cookie\":`mcp_demo_sid=${sid}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=86400`}});\n }catch(e){return c.redirect(\"/?error=\"+encodeURIComponent(e instanceof Error?e.message:String(e)))}\n});\n\napp.get(\"/mcp/callback\",c=>c.redirect(\"/oauth/callback?\"+new URL(c.req.url).searchParams));\n\napp.post(\"/chat\", async c => {\n await init();\n const sid=cookie(c.req.raw,\"mcp_demo_sid\");\n if(!sid) return c.json({error:\"Connect at least one service first.\"},401);\n const body=await c.req.json();\n const message=String(body.message||\"\").trim();\n if(!message) return c.json({error:\"Enter a question.\"},400);\n const toolCalls:any[]=[];\n try{\n const rows:any[]=(await sqlite.execute({sql:\"SELECT provider,access_token FROM mcp_connections WHERE sid=? AND access_token IS NOT NULL\",args:[sid]})).rows as any[];\n if(!rows.length) return c.json({error:\"Reconnect a service to enable chat.\"},400);\n const registry=new MapPromise}>();\n const aiTools:any[]=[];\n for(const row of rows){\n const provider=await resolveProvider(row.provider);\n if(!provider)continue;\n const token=await decryptToken(row.access_token);\n const {tools}=await mcpToolList(provider,token);\n for(const tool of tools){\n let fn=(provider.key+\"__\"+tool.name).replace(/[^a-zA-Z0-9_-]/g,\"_\").slice(0,64);\n let n=2;while(registry.has(fn))fn=(fn.slice(0,60)+\"_\"+n++).slice(0,64);\n registry.set(fn,{provider,token,tool});\n aiTools.push({type:\"function\",function:{name:fn,description:`[${provider.name}] ${tool.description||tool.name}`.slice(0,1000),parameters:tool.inputSchema||{type:\"object\",properties:{}}}});\n }\n }\n const openai=new OpenAI();\n const connectedNames=rows.map((r:any)=>byKey.get(r.provider)?.name||directoryEntries.find(x=>slug(x.service)===r.provider)?.service).filter(Boolean);\n const proofMode=/each connected service|each of my connected services|most recent items|proves? the connection/i.test(message);\n if(proofMode){\n const proofRequests:Record={\n valtown:\"Use the authenticated Val Town MCP tools to find the three most recently updated projects.\",\n notion:\"Find the three most recently edited Notion pages or documents. Prefer an API/tool result explicitly sorted by last edited time.\",\n linear:\"Find the three most recently updated Linear issues.\",\n sentry:\"Find the three most recent Sentry issues or errors.\",\n stripe:\"Find the three most recent Stripe payments; if payments are unavailable, use the three most recent customers.\",\n };\n const proofLabels:Record={\n valtown:\"Your three most recently updated Val Town projects are:\",\n notion:\"Your three most recently edited Notion docs are:\",\n linear:\"Your three most recently updated Linear issues are:\",\n sentry:\"Your three most recent Sentry issues or errors are:\",\n stripe:\"Your three most recent Stripe payments are:\",\n };\n const proofs:string[]=[];\n for(const row of rows){\n const provider=await resolveProvider(row.provider);\n if(!provider) continue;\n const prefix=provider.key+\"__\";\n const toolsForProvider=aiTools.filter((t:any)=>t.function.name.startsWith(prefix));\n if(!toolsForProvider.length){proofs.push(\"### \"+provider.name+\"\\nConnected, but no tools were advertised.\");continue;}\n const proofMessages:any[]=[\n {role:\"system\",content:`You are proving that an OAuth connection to ${provider.name} works. You MUST call at least one provided tool and use its returned data. ${proofRequests[provider.key]||`Find the three most recently updated items in ${provider.name}.`} You MUST return exactly three real items when the tool provides them. Include each item’s title or identifying name and its updated/created date when available. Link every item title to its service-provided URL using Markdown. Never invent or guess a URL; if the tool returns no URL, leave that title unlinked and state that no URL was provided. If the tools cannot determine recency or return fewer than three items, say that plainly; never substitute an arbitrary result or invent data. Format the result as a short numbered Markdown list only. Do not mention any other service.`},\n {role:\"user\",content:proofRequests[provider.key]||\"Fetch the three most recently updated items.\"},\n ];\n let proof=\"\";\n for(let round=0;round<5;round++){\n const completion:any=await openai.chat.completions.create({model:\"gpt-5.4-nano\",messages:proofMessages,tools:toolsForProvider,tool_choice:round===0?\"required\":\"auto\",max_completion_tokens:500});\n const reply=completion.choices?.[0]?.message;\n if(!reply) break;\n proofMessages.push(reply);\n if(!reply.tool_calls?.length){proof=reply.content||\"\";break;}\n for(const call of reply.tool_calls){\n const item=registry.get(call.function.name);\n if(!item) continue;\n let args={}; try{args=JSON.parse(call.function.arguments||\"{}\")}catch{}\n try{\n const result=item.call?await item.call():await mcpToolCall(item.provider,item.token,item.tool.name,args);\n const response=JSON.stringify(result,null,2).slice(0,30000);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,response});\n proofMessages.push({role:\"tool\",tool_call_id:call.id,content:response});\n }catch(e){\n const error=e instanceof Error?e.message:String(e);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,error});\n proofMessages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool error: \"+error});\n }\n }\n }\n proofs.push(\"### \"+provider.name+\"\\n\"+(proofLabels[provider.key]||\"Your three most recent items are:\")+\"\\n\"+(proof||\"Connected, but I could not retrieve three recent items.\"));\n }\n return c.json({answer:proofs.join(\"\\n\\n\"),toolCalls});\n }\n const messages:any[]=[\n {role:\"system\",content:`The user has connected exactly these services: ${connectedNames.join(\", \")}. No other service is connected, even if its name appears inside a document or search result. For requests about each connected service, you MUST call at least one tool belonging to every service in this list and return three concise, concrete recent items per service, such as document titles, issues, customers, errors, or payments. Link every item title to the URL returned by that service using Markdown; never fabricate a URL. Never present a mention of another product inside one service as data fetched from that product. Label every item with the connected service that actually supplied it. Format the answer as concise Markdown. If a tool cannot produce a proof item, say so explicitly.`},\n {role:\"user\",content:message},\n ];\n for(let round=0;round<4;round++){\n const completion:any=await openai.chat.completions.create({model:\"gpt-5.4-nano\",messages,tools:aiTools,tool_choice:\"auto\",max_completion_tokens:1200});\n const reply=completion.choices?.[0]?.message;\n if(!reply) throw new Error(\"The model returned no response.\");\n messages.push(reply);\n if(!reply.tool_calls?.length) return c.json({answer:reply.content||\"Done.\",toolCalls});\n for(const call of reply.tool_calls){\n const item=registry.get(call.function.name);\n if(!item){messages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool unavailable\"});continue;}\n let args={}; try{args=JSON.parse(call.function.arguments||\"{}\")}catch{}\n try{\n const result=item.call?await item.call():await mcpToolCall(item.provider,item.token,item.tool.name,args);\n const response=JSON.stringify(result,null,2).slice(0,30000);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,response});\n messages.push({role:\"tool\",tool_call_id:call.id,content:response});\n }catch(e){\n const error=e instanceof Error?e.message:String(e);\n toolCalls.push({service:item.provider.name,name:item.tool.name,args,error});\n messages.push({role:\"tool\",tool_call_id:call.id,content:\"Tool error: \"+error});\n }\n }\n }\n return c.json({answer:\"I reached the tool-call limit. Try a narrower question.\",toolCalls});\n }catch(e){\n console.error(e);\n return c.json({error:e instanceof Error?e.message:String(e)},500);\n }\n});\n\nexport default app.fetch;\n","label",[142],"82d073a5-604d-4445-8e33-db545aca7b41","directory-data.ts","0366de56-8601-11f1-bf6f-1607ee4eb77e",132,["D",1784759766869],6,"export type DirectoryEntry = { service:string; mcp:string; mcpUrl:string|null; cimd:\"yes\"|\"no\"|\"restricted\"|\"unknown\"|\"n/a\"; cimdUrl:string|null; dcr:\"yes\"|\"no\"|\"restricted\"|\"unknown\"|\"n/a\"; dcrUrl:string|null; source:string; sourceUrl:string|null; blocker?:string; };\n\nexport const directoryEntries: DirectoryEntry[] = [\n {\n \"service\": \"Airtable\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.airtable.com\",\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://airtable.com/.well-known/oauth-authorization-server/oauth2/v1\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Amplitude\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.amplitude.com/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://mcp.amplitude.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.amplitude.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Bluesky / AT Protocol\",\n \"mcp\": \"Not required\",\n \"mcpUrl\": null,\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://atproto.com/specs/oauth\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://atproto.com/specs/oauth\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Brandfetch\",\n \"mcp\": \"Registry remote\",\n \"mcpUrl\": \"https://mcp.brandfetch.io/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://developers.brandfetch.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://developers.brandfetch.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Calendly\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.calendly.com\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://calendly.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://calendly.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Canva\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.canva.com/mcp\",\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://mcp.canva.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"restricted\",\n \"dcrUrl\": \"https://mcp.canva.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Exa\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.exa.ai/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://auth.exa.ai/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://auth.exa.ai/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"GitLab\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://gitlab.com/api/v4/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://gitlab.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://gitlab.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Hugging Face\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://huggingface.co/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://huggingface.co/.well-known/openid-configuration\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://huggingface.co/.well-known/openid-configuration\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Intercom\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.intercom.com/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.intercom.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.intercom.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Jotform\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.jotform.com\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.jotform.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.jotform.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Linear\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.linear.app/mcp\",\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://mcp.linear.app/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.linear.app/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Miro\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.miro.com\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.miro.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.miro.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Notion\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.notion.com/mcp\",\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://mcp.notion.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.notion.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Postman\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.postman.com/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://learning.postman.com/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Replit\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://replit-mcp.com/server/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://replit.com/oidc/.well-known/openid-configuration\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://replit.com/oidc/.well-known/openid-configuration\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Sentry\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.sentry.dev/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.sentry.dev/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.sentry.dev/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Sequentum\",\n \"mcp\": \"Registry remote\",\n \"mcpUrl\": \"https://mcp.sequentum.com/mcp\",\n \"cimd\": \"yes\",\n \"cimdUrl\": \"https://dashboard.sequentum.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://dashboard.sequentum.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Stripe\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.stripe.com\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.stripe.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.stripe.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"SureSMS\",\n \"mcp\": \"Registry remote\",\n \"mcpUrl\": \"https://mcp.suresms.com/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.suresms.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://mcp.suresms.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Val Town\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://api.val.town/v3/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://api.val.town/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://api.val.town/.well-known/oauth-authorization-server\",\n \"source\": \"Val Town Docs\",\n \"sourceUrl\": \"https://docs.val.town/guides/prompting/mcp/\"\n },\n {\n \"service\": \"Vercel\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.vercel.com\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://vercel.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://vercel.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"WordPress.com\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://public-api.wordpress.com/wpcom/v2/mcp/v1\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://public-api.wordpress.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"yes\",\n \"dcrUrl\": \"https://public-api.wordpress.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"10x Genomics Cloud\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint found; connector page proves catalog presence only.\"\n },\n {\n \"service\": \"ActiveCampaign\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint or MCP OAuth metadata found.\"\n },\n {\n \"service\": \"Actively\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint or auth documentation found.\"\n },\n {\n \"service\": \"AdisInsight\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint found; likely account/partner-scoped.\"\n },\n {\n \"service\": \"Adobe Customer Journey Analytics\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public remote endpoint found; Adobe agent connectors appear product/tenant-scoped.\"\n },\n {\n \"service\": \"Adobe Experience Manager\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public remote endpoint found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Adobe for creativity\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public generic MCP endpoint found.\"\n },\n {\n \"service\": \"Adobe Journey Optimizer\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public remote endpoint found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Adobe Marketing Agent\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public remote endpoint found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Adobe Workfront\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public remote endpoint found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Affinity\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint or OAuth metadata found.\"\n },\n {\n \"service\": \"Agentic Presentations by SlidesGPT\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint confirmed from provider documentation.\"\n },\n {\n \"service\": \"Ahrefs\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint or authorization metadata found.\"\n },\n {\n \"service\": \"Aiera\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint found; likely customer-scoped.\"\n },\n {\n \"service\": \"AirOps\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint or auth metadata found.\"\n },\n {\n \"service\": \"Airwallex\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint found; catalog presence alone is insufficient.\"\n },\n {\n \"service\": \"Aiwyn Tax\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"AllTrails\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Alma\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"alphaXiv\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote endpoint confirmed.\"\n },\n {\n \"service\": \"Apollo.io\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"AppFolio Realm-X\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint; appears product-integrated.\"\n },\n {\n \"service\": \"Asana\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.asana.com/sse\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://developers.asana.com/docs/using-asanas-mcp-server\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://support.zendesk.com/hc/en-us/articles/10497779528730-Connecting-to-MCP-servers-and-using-MCP-tools-in-action-flows-EAP\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Atlassian\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.atlassian.com/v1/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://mcp.atlassian.com/.well-known/oauth-protected-resource\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://mcp.atlassian.com/.well-known/oauth-protected-resource\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Atlassian Rovo\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.atlassian.com/v1/sse\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://support.atlassian.com/atlassian-rovo-mcp-server/docs/setting-up-ides/\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://support.atlassian.com/atlassian-rovo-mcp-server/docs/setting-up-ides/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Attention\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Attio\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Audible\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Aura\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Aurora\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Autodesk Product Help\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Catalog describes a documentation connector but no public first-party remote URL was established.\"\n },\n {\n \"service\": \"AWS Marketplace\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No standalone public OAuth-protected MCP endpoint established.\"\n },\n {\n \"service\": \"Base44\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP URL/auth metadata found.\"\n },\n {\n \"service\": \"Benchling\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint found; likely tenant/enterprise scoped.\"\n },\n {\n \"service\": \"Benevity\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Bigdata.com\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Biomni Lab\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"BioRender\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote endpoint/auth metadata found.\"\n },\n {\n \"service\": \"bioRxiv\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote endpoint confirmed.\"\n },\n {\n \"service\": \"Bitly\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Blackbaud\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Blockscout\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party hosted endpoint established; public MCP implementations may require local configuration.\"\n },\n {\n \"service\": \"BoardWise\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Boltz API\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Booking.com\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Box\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.box.com\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://api.box.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://api.box.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Braze\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Brevo\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Brex\",\n \"mcp\": \"Official/listed\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://slack.com/help/articles/48855576908307-Guide-to-Model-Context-Protocol-in-Slack\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"BrightHire\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Brisk Teaching\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Campfire\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Canary Data\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Candid\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"CargoAi\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Carta\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Clay\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": null,\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Close\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Cloudflare\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Cloudflare publishes multiple task-specific remote MCP endpoints rather than one canonical user-account endpoint; exact connector endpoint must be resolved before OAuth probing.\"\n },\n {\n \"service\": \"Cloudinary\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party hosted remote endpoint/auth metadata confirmed.\"\n },\n {\n \"service\": \"CMS Coverage\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party OAuth-protected endpoint established; connector may expose public data without OAuth.\"\n },\n {\n \"service\": \"CoCounsel Legal\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; product/tenant-scoped.\"\n },\n {\n \"service\": \"Cognito Forms\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"CoinDesk\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party MCP endpoint/auth metadata found; connector may expose public data.\"\n },\n {\n \"service\": \"Common Room\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote endpoint/auth metadata found.\"\n },\n {\n \"service\": \"D&B Risk Analytics\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; likely product-scoped.\"\n },\n {\n \"service\": \"Databricks\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Managed MCP server URLs are workspace-specific, so there is no single public endpoint to probe.\"\n },\n {\n \"service\": \"Datadog\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Official remote server endpoint depends on the customer's Datadog site; no universal authorization metadata URL.\"\n },\n {\n \"service\": \"DataGrail\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"DataHub\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No universal public hosted endpoint established; deployments may be tenant/self-hosted.\"\n },\n {\n \"service\": \"Datasite\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Day AI\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"dbt\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Official remote endpoint is account-host-specific (https://YOUR_DBT_HOST_URL/api/ai/v1/mcp), so no universal auth metadata can be classified.\"\n },\n {\n \"service\": \"Definely\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Demographic and Health Surveys\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party OAuth-protected endpoint established; may expose public data.\"\n },\n {\n \"service\": \"DocuSign\",\n \"mcp\": \"Official/listed\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://slack.com/help/articles/48855576908307-Guide-to-Model-Context-Protocol-in-Slack\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"DoorDash\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": null,\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Dropbox\",\n \"mcp\": \"Official/listed\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://slack.com/help/articles/48855576908307-Guide-to-Model-Context-Protocol-in-Slack\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Egnyte\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No universal public endpoint found; likely tenant-specific.\"\n },\n {\n \"service\": \"Embat\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Enterpret\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Era Context\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Eraser\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party remote MCP endpoint/auth metadata found.\"\n },\n {\n \"service\": \"EULER\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found.\"\n },\n {\n \"service\": \"Everlaw\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; likely tenant-scoped.\"\n },\n {\n \"service\": \"Excalidraw\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party OAuth-protected hosted endpoint established; connector may be a third-party/public tool.\"\n },\n {\n \"service\": \"Expedia\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"A reported endpoint exists at https://www.expedia.com/mcp, but first-party documentation was not found and probing was rate-limited (HTTP 429); auth classification remains unknown.\"\n },\n {\n \"service\": \"FactSet AI-Ready Data\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": null,\n \"dcr\": \"unknown\",\n \"dcrUrl\": null,\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No public first-party endpoint/auth metadata found; likely licensed/customer-scoped.\"\n },\n {\n \"service\": \"Figma\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.figma.com/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://api.figma.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"restricted\",\n \"dcrUrl\": \"https://api.figma.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Gainsight (CS)\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found; connector listing does not expose transport or OAuth metadata.\"\n },\n {\n \"service\": \"Gainsight (Staircase AI)\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found; appears partner-mediated.\"\n },\n {\n \"service\": \"Gamma\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.gamma.app/mcp\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://developers.gamma.app/mcp/mcp-tools-reference\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://developers.gamma.app/mcp/mcp-tools-reference\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Public official endpoint verified, but metadata fetch returned 403/timeout during probe; cannot classify registration safely.\"\n },\n {\n \"service\": \"GitHub\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://api.githubcopilot.com/mcp/\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://github.com/.well-known/oauth-authorization-server/login/oauth\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://github.com/.well-known/oauth-authorization-server/login/oauth\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"GitHub MCP\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://api.githubcopilot.com/mcp/\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://github.com/.well-known/oauth-authorization-server/login/oauth\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://github.com/.well-known/oauth-authorization-server/login/oauth\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Glean\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://docs.glean.com/administration/platform/mcp/mcp-gateway\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://docs.glean.com/administration/platform/mcp/mcp-gateway\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"First-party MCP is tenant-specific; a tenant endpoint is required for live OAuth discovery.\"\n },\n {\n \"service\": \"Glovo\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP documentation or endpoint found.\"\n },\n {\n \"service\": \"Gmail\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": \"https://chatgpt.com/features/plugins/\",\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Plugin/connector is not evidence of a vendor-operated public MCP server.\"\n },\n {\n \"service\": \"GoCardless\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"GoDaddy\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Goodnotes\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Google Drive\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": \"https://chatgpt.com/features/plugins/\",\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Plugin/connector is not evidence of a vendor-operated public MCP server.\"\n },\n {\n \"service\": \"Harmonic\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Harness.io\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"First-party MCP material found only in product/partner context; no stable public endpoint established.\"\n },\n {\n \"service\": \"Harvey\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"HealthEx (beta)\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Beta connector exposes no public endpoint or OAuth metadata.\"\n },\n {\n \"service\": \"Helix GenoSphere\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Hex\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party generally connectable remote MCP endpoint established.\"\n },\n {\n \"service\": \"Highspot\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Honeycomb\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Published integrations found, but no verified vendor-hosted public remote endpoint.\"\n },\n {\n \"service\": \"HubSpot\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.hubspot.com\",\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://developers.hubspot.com/mcp\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://developers.hubspot.com/mcp\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Protected-resource metadata names the same host, but no open registration endpoint; first-party setup uses a known/manual client.\"\n },\n {\n \"service\": \"Intuit QuickBooks\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://github.com/intuit/quickbooks-online-mcp-server\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://github.com/intuit/quickbooks-online-mcp-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"First-party repository found, but no vendor-hosted public remote endpoint or discoverable OAuth metadata established.\"\n },\n {\n \"service\": \"Intuit TurboTax\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Catalog entry does not expose a public MCP URL or registration mechanism.\"\n },\n {\n \"service\": \"Ironclad Contracts\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"isolved People Cloud\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Jam\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Jentic\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No single vendor-hosted public service MCP endpoint established.\"\n },\n {\n \"service\": \"Ketryx\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Kindora Funder Discovery\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://claude.com/connectors\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://claude.com/connectors\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"No first-party public remote MCP URL found.\"\n },\n {\n \"service\": \"Lucidchart\",\n \"mcp\": \"Official/listed\",\n \"mcpUrl\": null,\n \"cimd\": \"unknown\",\n \"cimdUrl\": \"https://help.lucid.co/hc/en-us/articles/42578801807508-Integrate-Lucid-with-AI-tools-using-the-Lucid-MCP-server\",\n \"dcr\": \"unknown\",\n \"dcrUrl\": \"https://help.lucid.co/hc/en-us/articles/42578801807508-Integrate-Lucid-with-AI-tools-using-the-Lucid-MCP-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"First-party docs confirm OAuth MCP, but no general public server URL was exposed in accessible documentation; guessed host returned 404.\"\n },\n {\n \"service\": \"Microsoft Learn\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://learn.microsoft.com/api/mcp\",\n \"cimd\": \"n/a\",\n \"cimdUrl\": \"https://learn.microsoft.com/en-us/training/support/mcp\",\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://learn.microsoft.com/en-us/training/support/mcp\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Microsoft Sentinel Data Exploration\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://sentinel.microsoft.com/mcp/data-exploration\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\",\n \"blocker\": \"Microsoft Entra metadata advertises neither CIMD nor DCR; requires pre-registration.\"\n },\n {\n \"service\": \"SharePoint\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": null,\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"Slack\",\n \"mcp\": \"Official remote\",\n \"mcpUrl\": \"https://mcp.slack.com/mcp\",\n \"cimd\": \"no\",\n \"cimdUrl\": \"https://mcp.slack.com/.well-known/oauth-authorization-server\",\n \"dcr\": \"no\",\n \"dcrUrl\": \"https://mcp.slack.com/.well-known/oauth-authorization-server\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n },\n {\n \"service\": \"TurboTax\",\n \"mcp\": \"Catalogued\",\n \"mcpUrl\": null,\n \"cimd\": \"n/a\",\n \"cimdUrl\": null,\n \"dcr\": \"n/a\",\n \"dcrUrl\": \"https://chatgpt.com/features/plugins/\",\n \"source\": \"Claude Connectors\",\n \"sourceUrl\": \"https://claude.com/connectors\"\n }\n];\n",[153],"063775ff-92c2-4071-b34f-4ee05b03f7d1",["D",1788207418119],0,[33],"24a1cc09-f9b0-4a57-84fb-79c9c3801cab","code-tour.ts","1beccb1c-8605-11f1-ac43-1607ee4eb77e",133,["D",1784759783898],4,"type Step={title:string;why:string;lines:Array<[string,string]>};\n\nconst steps:Step[]=[\n {title:\"1. Describe providers\",why:\"Every connection uses the same MCP and OAuth machinery; only protocol endpoints and capabilities vary.\",lines:[\n ['type Provider = {','Define the small configuration shape shared by every provider.'],\n [' endpoint: string;','The provider’s authenticated remote MCP endpoint.'],\n [' auth: string; token: string; register: string;','OAuth authorization, token, and DCR endpoints.'],\n [' cimd: boolean;','Whether the authorization server accepts a metadata-document URL as client_id.'],\n ['};','No provider-specific callback, tool adapter, or token-exchange code is needed.'],\n ]},\n {title:\"2. Discover more providers\",why:\"The directory can turn standards metadata into a working connection without adding another config object.\",lines:[\n ['const metadataUrl = entry.cimdUrl ?? entry.dcrUrl;','Start from the evidence URL already collected by the directory.'],\n ['const metadata = await fetch(metadataUrl).then(r => r.json());','Read the authorization-server metadata document.'],\n ['return {','Construct the same Provider shape used by hand-picked demos.'],\n [' auth: metadata.authorization_endpoint,','Discover where the browser should authorize.'],\n [' token: metadata.token_endpoint,','Discover where the code is exchanged.'],\n [' register: metadata.registration_endpoint,','Discover DCR support directly from metadata.'],\n ['};','After this, the rest of the flow is provider-independent.'],\n ]},\n {title:\"3. Generate PKCE\",why:\"PKCE binds the browser authorization response to the client that initiated it.\",lines:[\n ['const verifier = randomBytes(48);','Create a high-entropy secret that never leaves the server before callback.'],\n ['const challenge = sha256(verifier);','Send only its hash to the authorization server.'],\n ['const state = crypto.randomUUID();','Give this browser flow an unpredictable lookup key.'],\n ['await save({ state, verifier, provider });','Persist the verifier and provider until the callback returns.'],\n ]},\n {title:\"4. Register with DCR\",why:\"DCR creates a client at runtime, eliminating the developer-portal setup step.\",lines:[\n ['const client = await fetch(provider.register, {','POST to the advertised registration endpoint.'],\n [' method: \"POST\",','Registration is a state-changing protocol operation.'],\n [' body: JSON.stringify({','Send standard OAuth client metadata.'],\n [' redirect_uris: [callbackUrl],','The provider may redirect only to this callback.'],\n [' token_endpoint_auth_method: \"none\",','This public client relies on PKCE rather than a durable client secret.'],\n [' }),','The same document works across compliant providers.'],\n ['}).then(r => r.json());','The response supplies the newly created client_id.'],\n ]},\n {title:\"5. Identify with CIMD\",why:\"CIMD removes even the registration POST: the client_id is a URL containing the client metadata.\",lines:[\n ['app.get(\"/oauth/client-metadata.json\", c => c.json({','Host a public metadata document at a stable HTTPS URL.'],\n [' client_id: origin + \"/oauth/client-metadata.json\",','The document identifies itself.'],\n [' redirect_uris: [origin + \"/oauth/callback\"],','The authorization server validates callbacks against this document.'],\n ['}));','Providers can fetch this document whenever they need current metadata.'],\n ['const clientId = origin + \"/oauth/client-metadata.json\";','Use that URL directly as client_id—no registration request.'],\n ]},\n {title:\"6. Authorize\",why:\"DCR and CIMD converge here; only the source of client_id differs.\",lines:[\n ['const url = new URL(provider.auth);','Start with the discovered authorization endpoint.'],\n ['url.searchParams.set(\"client_id\", clientId);','Use either the DCR-issued ID or CIMD metadata URL.'],\n ['url.searchParams.set(\"redirect_uri\", callbackUrl);','Tell the provider where to return the code.'],\n ['url.searchParams.set(\"code_challenge\", challenge);','Bind this request to the secret PKCE verifier.'],\n ['url.searchParams.set(\"state\", state);','Bind the callback to the stored flow record.'],\n ['return redirect(url);','The user now grants access on the provider’s site.'],\n ]},\n {title:\"7. Exchange the code\",why:\"The callback is identical for DCR and CIMD.\",lines:[\n ['const flow = await load(request.query(\"state\"));','Recover the verifier, client ID, and provider safely.'],\n ['const token = await fetch(provider.token, {','POST the short-lived authorization code to the token endpoint.'],\n [' body: form({ code, client_id: flow.clientId,','Identify the same client used during authorization.'],\n [' code_verifier: flow.verifier }),','Prove this is the client that created the PKCE challenge.'],\n ['}).then(r => r.json());','Receive the access token.'],\n ['await storeEncrypted(token.access_token);','Encrypt the token before storing it in project-scoped SQLite.'],\n ]},\n {title:\"8. Prove the connection\",why:\"A successful token exchange is not enough; the app immediately uses the token against every provider’s MCP server.\",lines:[\n ['await mcp(\"initialize\");','Negotiate the MCP protocol version and session.'],\n ['const tools = await mcp(\"tools/list\");','Fetch authenticated capabilities from the real account.'],\n ['store(tools);','Remember what the connected MCP server actually advertised.'],\n ['// Val Town follows this same path','There is no hand-written Val Town REST tool or provider-specific adapter.'],\n ]},\n {title:\"9. Give tools to the model\",why:\"Every connected MCP server becomes one namespaced tool collection for the chat model.\",lines:[\n ['for (const service of connectedServices) {','Process only services authorized in this browser session.'],\n [' const tools = await service.listTools();','Discover current tool schemas dynamically.'],\n [' for (const tool of tools) {','Convert each MCP tool to an OpenAI function tool.'],\n [' modelTools.push(namespace(service, tool));','Namespacing prevents collisions such as several search tools.'],\n [' }','No service-specific tool-call implementation is required.'],\n ['}','The model can now choose tools across every connection.'],\n ]},\n {title:\"10. Render safely\",why:\"The model returns Markdown, but arbitrary model HTML must not reach the page unsanitized.\",lines:[\n ['const markdown = await askConnectedServices(message);','The server returns a concise Markdown answer with source links.'],\n ['const html = marked.parse(markdown);','Turn Markdown into readable lists and links.'],\n ['answer.innerHTML = DOMPurify.sanitize(html);','Remove unsafe markup before inserting it into the DOM.'],\n ]},\n];\n\nconst esc=(s:string)=>s.replaceAll(\"&\",\"&\").replaceAll(\"<\",\"<\").replaceAll(\">\",\">\").replaceAll('\"',\""\");\n\nexport function codeTourPage(){\n const nav=steps.map((s,i)=>``).join(\"\");\n const panels=steps.map((s,i)=>`

${esc(s.title)}

${esc(s.why)}

${s.lines.map(([code,explanation],n)=>``).join(\"\")}

`).join(\"\");\n return `How this Val works

← Back to the app

How every line works

A guided tour of the essential code, simplified to expose the protocol rather than the page styling. Choose a chapter, then click any line for its explanation.

${panels}

`;\n}\n",[165],"721fb421-278b-43f0-9636-78a8e833647c","README.md","a9d89c80-8614-11f1-8ce4-1607ee4eb77e",136,["D",1784760065731],3,"# Connect to all the apps with OAuth DCR + CIMD\n\nA live OAuth interoperability demo for Dynamic Client Registration (DCR) and Client ID Metadata Documents (CIMD).\n\n- Live app: https://oauth-demos.val.run/\n- Guided code tour: https://oauth-demos.val.run/code-tour\n- Val source: https://www.val.town/x/stevekrouse/oauth-demos/code/\n\n## What it does\n\nThe app lists only services with at least one runnable DCR or CIMD connection flow. After a user authorizes a service, the app proves the connection by calling its API or MCP server. Connected tools can then answer questions in the built-in chat. Each tool call and raw response is shown in a collapsed, expandable trace.\n\nThe chat sends the user's prompt and tool results from authorized services to OpenAI. Do not broaden scopes or expose new connector data without making that consequence clear.\n\n## Files\n\n- `main.tsx`: Hono app, page UI, OAuth flows, MCP client, encrypted token storage, and chat orchestration.\n- `directory-data.ts`: researched service directory plus evidence URLs.\n- `code-tour.ts`: interactive explanation of the important protocol code.\n- `research/`: one-off probes used to validate endpoints and registration behavior.\n- `AGENTS.md`: maintenance notes and invariants for future agents.\n\n## OAuth behavior\n\nFive providers have explicit configuration in `main.tsx`: Val Town, Notion, Linear, Sentry, and Stripe. Other runnable providers are discovered from their authorization-server metadata in `directory-data.ts`. Every provider, including Val Town, supplies its advertised MCP tools directly to the chat.\n\nAll authorization-code flows use PKCE. DCR creates a client at runtime. CIMD uses `/oauth/client-metadata.json` as the `client_id`.\n\nAccess tokens are encrypted with AES-GCM before storage in the val's project-scoped SQLite database. Browser sessions are represented by an HttpOnly, Secure, SameSite=Lax cookie and expire after one day.\n\n## Verification\n\nA successful deployment should return HTTP 200 at the live URL and render:\n\n1. Notion\n2. Linear\n3. Val Town\n\nThe table columns must be `App`, `DCR`, then `CIMD`, and every row must contain at least one Connect button. Full OAuth verification requires interactive authorization against each provider.\n",[173],"610e557a-aea8-48fc-849f-7d23f4eeed15","AGENTS.md","ab88a9da-8614-11f1-8895-1607ee4eb77e",135,["D",1784759802704],2,"# AGENTS.md\n\n## Project summary\n\nThis val is a public DCR/CIMD interoperability demo. Its HTTP entrypoint is `main.tsx`, deployed at https://oauth-demos.val.run/. It supports OAuth authorization, authenticated MCP tool discovery, and an OpenAI-powered chat over each provider’s full advertised MCP toolset.\n\nThere is no local build system or package manifest. Val Town runs the files directly with Deno-compatible URL imports.\n\n## File map\n\n- `main.tsx`: all routes, HTML/CSS/JS, OAuth state, token exchange, MCP calls, and model tool calling.\n- `directory-data.ts`: the researched catalog. Preserve evidence URLs and distinguish researched capability from runtime support.\n- `code-tour.ts`: simplified teaching excerpts, not executable copies of `main.tsx`.\n- `research/probe.ts` and `research/test-registration.ts`: diagnostic scripts. Do not import them into production.\n- `README.md`: public project overview.\n\n## UI invariants\n\n- Render only entries that produce at least one real Connect button.\n- Keep the popular order beginning Notion, Linear, Val Town. Val Town is always third.\n- Table columns are App, DCR, CIMD, in that order.\n- Company marks use the company-site favicon and appear left of the name.\n- Keep the page and chat light. Dark backgrounds are reserved for syntax-highlighted code on the code-tour page.\n- The table is derived at render time. Do not manually duplicate the service list in HTML.\n- Chat tool calls render as collapsed `

` panels with arguments and raw responses. Keep trace text escaped via DOM `textContent`.\n\n## OAuth architecture\n\n`providers` contains hand-configured integrations. `resolveProvider` discovers the others from the metadata URLs stored in `directory-data.ts`.\n\nRoutes:\n\n- `GET /oauth/:provider/:mode/start`: creates PKCE state, optionally performs DCR, then redirects to authorization.\n- `GET /oauth/client-metadata.json`: stable CIMD document.\n- `GET /oauth/callback`: exchanges the code, verifies useful access, encrypts the token, and saves the connection.\n- `POST /chat`: exposes each connected MCP tool to the model and executes selected calls.\n- `GET /code-tour`: teaching UI.\n\nVal Town uses its official MCP endpoint at `https://api.val.town/v3/mcp`, exactly like the other providers. Do not reintroduce a hand-written REST adapter. Val Town OAuth scope names use underscores, and its project scope is `project_rw`.\n\n## Data and security\n\nProject-scoped SQLite tables:\n\n- `mcp_flows`: short-lived OAuth state and PKCE verifier.\n- `mcp_connections`: encrypted access token plus discovered tool summary, keyed by browser session and provider.\n\nThe AES-GCM key is persisted in project-scoped blob storage under `mcp-token-encryption-key:v1`. Never log tokens, client secrets, authorization codes, or decrypted tool results.\n\nImportant: `POST /chat` sends user prompts and connector tool results to OpenAI. Expanding OAuth scopes expands the data that may be sent there. Require explicit user approval before broadening scopes or adding a new data source.\n\n## Editing and verification\n\nPrefer targeted replacements for small changes and a whole-file update only for coordinated refactors. After changing `main.tsx`, fetch its HTTP endpoint in the same edit call. Confirm HTTP 200, inspect the rendered table order and columns, and check logs if deployment fails.\n\nOAuth buttons cannot be fully verified non-interactively. Preserve PKCE, `state`, `resource` for MCP, token encryption, the secure session cookie, and the one-hour cleanup for abandoned flows.\n",[181],"6d83eb4b-f9ba-4fd1-a14e-a8a852a0d51f","research","be4a3357-8a13-4c9e-913c-09690a439aea",9,["D",1784745267183],"directory",[189],"pulls","branches","forks","envVars",{"_202":162,"_204":162},"connections",{"_202":162,"_203":162},"count","unfilledCount","emptyCount",{"_47":188,"_37":189,"_35":190,"_143":-5,"_45":46,"_44":191,"_145":63,"_42":249,"_13":162,"_38":193,"_40":-5,"_29":30,"_150":-5,"_215":250,"_32":251},{"_47":241,"_37":242,"_35":243,"_143":190,"_45":46,"_44":244,"_145":63,"_42":245,"_13":177,"_38":39,"_40":246,"_29":30,"_150":-5,"_215":247,"_32":248},{"_47":233,"_37":234,"_35":235,"_143":190,"_45":46,"_44":236,"_145":63,"_42":237,"_13":162,"_38":39,"_40":238,"_29":30,"_150":-5,"_215":239,"_32":240},{"_47":180,"_37":181,"_35":182,"_143":-5,"_45":46,"_44":183,"_145":30,"_42":230,"_13":185,"_38":26,"_40":186,"_29":30,"_150":-5,"_215":231,"_32":232},{"_47":172,"_37":173,"_35":174,"_143":-5,"_45":46,"_44":175,"_145":30,"_42":227,"_13":177,"_38":26,"_40":178,"_29":30,"_150":-5,"_215":228,"_32":229},{"_47":164,"_37":165,"_35":166,"_143":-5,"_45":46,"_44":167,"_145":30,"_42":224,"_13":169,"_38":39,"_40":170,"_29":30,"_150":-5,"_215":225,"_32":226},{"_47":160,"_37":33,"_35":36,"_143":-5,"_45":46,"_44":14,"_145":30,"_42":221,"_13":162,"_38":39,"_40":41,"_29":30,"_150":-5,"_215":222,"_32":223},{"_47":152,"_37":153,"_35":154,"_143":-5,"_45":46,"_44":155,"_145":30,"_42":218,"_13":157,"_38":39,"_40":158,"_29":30,"_150":-5,"_215":219,"_32":220},{"_47":141,"_37":142,"_35":61,"_143":-5,"_45":46,"_44":144,"_145":30,"_42":214,"_13":147,"_38":148,"_40":149,"_29":30,"_150":49,"_215":216,"_32":217},["D",1788207265185],"children",[],[142],["D",1784759766869],[],[153],["D",1788207418119],[],[33],["D",1784759783898],[],[165],["D",1784760065731],[],[173],["D",1784759802704],[],[181],"be51f567-722d-4c27-8243-7b1382ee08d9","test-registration.ts","b12949f2-85fc-11f1-919f-1607ee4eb77e",14,["D",1784745577550],"const callback=\"https://stevekrouse--a74a3cae85fa11f1942c1607ee4eb77e.web.val.run/mcp/callback\";\nconst tests=[\n {name:\"figma\",url:\"https://api.figma.com/v1/oauth/mcp/register\",body:{client_name:\"Val Town OAuth Demos\",redirect_uris:[callback],grant_types:[\"authorization_code\",\"refresh_token\"],response_types:[\"code\"],token_endpoint_auth_method:\"client_secret_post\"}},\n {name:\"asana\",url:\"https://mcp.asana.com/register\",body:{client_name:\"Val Town OAuth Demos\",redirect_uris:[callback],grant_types:[\"authorization_code\",\"refresh_token\"],response_types:[\"code\"],token_endpoint_auth_method:\"none\"}},\n];\nconst out=[];\nfor(const t of tests){const r=await fetch(t.url,{method:\"POST\",headers:{\"content-type\":\"application/json\",\"accept\":\"application/json\"},body:JSON.stringify(t.body)});out.push({name:t.name,status:r.status,headers:Object.fromEntries(r.headers),body:(await r.text()).slice(0,2000)});}\nconsole.log(JSON.stringify(out,null,2));\nexport default out;",[],[189,234],"14078280-4bef-4075-9352-23c58546b6a9","probe.ts","f82a8c5e-85fb-11f1-8c29-1607ee4eb77e",12,["D",1784745312157],"const targets = [\n [\"Notion\", \"https://mcp.notion.com/mcp\"],\n [\"Figma\", \"https://mcp.figma.com/mcp\"],\n [\"Slack\", \"https://mcp.slack.com/mcp\"],\n [\"Linear\", \"https://mcp.linear.app/mcp\"],\n [\"Sentry\", \"https://mcp.sentry.dev/mcp\"],\n [\"Atlassian\", \"https://mcp.atlassian.com/v1/mcp\"],\n [\"Canva\", \"https://mcp.canva.com/mcp\"],\n [\"Stripe\", \"https://mcp.stripe.com\"],\n [\"Intercom\", \"https://mcp.intercom.com/mcp\"],\n [\"Asana\", \"https://mcp.asana.com/sse\"],\n] as const;\n\nconst json = async (url: string) => {\n try {\n const r = await fetch(url, { redirect: \"manual\", headers: { accept: \"application/json, text/event-stream\" } });\n let body: any = null;\n try { body = await r.json(); } catch { body = (await r.text()).slice(0, 300); }\n return { url, status: r.status, headers: Object.fromEntries(r.headers), body };\n } catch (e) { return { url, error: String(e) }; }\n};\n\nasync function probe() {\n const output = [];\n for (const [name, endpoint] of targets) {\n const first: any = await json(endpoint);\n const auth = first.headers?.[\"www-authenticate\"] || \"\";\n const match = auth.match(/resource_metadata=\"([^\"]+)\"/);\n const candidates = [\n match?.[1],\n new URL(\"/.well-known/oauth-protected-resource\" + new URL(endpoint).pathname, endpoint).toString(),\n new URL(\"/.well-known/oauth-protected-resource\", endpoint).toString(),\n ].filter(Boolean) as string[];\n let resource: any = null;\n for (const u of [...new Set(candidates)]) {\n const x: any = await json(u);\n if (x.status === 200 && typeof x.body === \"object\") { resource = x; break; }\n }\n const issuer = resource?.body?.authorization_servers?.[0];\n let server: any = null;\n if (issuer) {\n for (const suffix of [\"/.well-known/oauth-authorization-server\", \"/.well-known/openid-configuration\"]) {\n const base = new URL(issuer);\n const u = base.origin + suffix + (base.pathname === \"/\" ? \"\" : base.pathname);\n const x: any = await json(u);\n if (x.status === 200 && typeof x.body === \"object\") { server = x; break; }\n }\n }\n output.push({\n name, endpoint,\n endpoint_status: first.status,\n www_authenticate: auth,\n resource_metadata_url: resource?.url,\n authorization_server: issuer,\n authorization_metadata_url: server?.url,\n authorization_endpoint: server?.body?.authorization_endpoint || null,\n token_endpoint: server?.body?.token_endpoint || null,\n scopes_supported: server?.body?.scopes_supported || null,\n registration_endpoint: server?.body?.registration_endpoint || null,\n client_id_metadata_document_supported: server?.body?.client_id_metadata_document_supported ?? server?.body?.client_id_metadata_documents_supported ?? null,\n auth_methods: server?.body?.token_endpoint_auth_methods_supported || null,\n error: first.error,\n });\n }\n console.log(JSON.stringify(output, null, 2));\n return output;\n}\n\nexport default await probe();",[],[189,242],["D",1784745267183],[206,207],[189],["D",1784744701880],["D",1789560070146],{"_104":103,"_111":107},{"_104":103,"_105":-5,"_106":107,"_19":59,"_108":109,"_110":30},{"_13":93,"_37":94,"_47":46,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":49,"_102":103},"ctx",{"_86":-5,"_131":290,"_291":292,"_293":294,"_295":30,"_296":30,"_297":30,"_298":63,"_299":-5,"_300":-7,"_301":-7,"_302":162,"_303":30,"_304":30,"_305":-5,"_306":30,"_307":30,"_308":30,"_309":-5},"ENV",{"_261":262,"_263":264,"_265":94,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v139