{"uid":"cap_fhWA09UdGxAdKeolrEnYS","slug":"oauth-client-registration-security-auditor-147c480a","name":"OAuth Client Registration Security Auditor","description":"Audit an OAuth client registration. Reports a wildcard redirect URI, where any matching host receives authorization codes; a plaintext redirect outside loopback; a registered URI that carries its own redirect parameter, so a code can be forwarded off the client's origin while still matching; the implicit and password grants; a public client registering a grant that needs a secret; and a client secret committed into the registration document itself. No secret value is ever reported.","url":"https://api.zfinia.com/x402/v1/oauth-client-registration-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"client":{"type":"object"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.3","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.3/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7nUh_FE-UJ88uXOpR4gU_","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.3","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits an OAuth client registration document for common security vulnerabilities including wildcard redirect URIs, plaintext redirects, open redirect chaining, insecure grant types, and exposed client secrets.","exampleAgentPrompt":"Can you audit this OAuth client registration for security issues — I want to know about any wildcard redirect URIs, plaintext redirects, open redirect chaining risks, insecure grant types like implicit or password, and whether the client secret is baked into the registration document?","exampleUseCases":[{"title":"Pre-launch OAuth app security review","prompt":"Before we go live, audit this OAuth client registration and flag any wildcard redirect URIs, plaintext non-loopback redirects, open redirect chains, or exposed client secrets so we can fix them first."},{"title":"Detecting risky grant types in legacy client","prompt":"We inherited this old OAuth client config — can you check it for insecure grant types like implicit or resource owner password, and tell us if it's a public client using grants that require a secret?"},{"title":"Automated security gate in CI pipeline","prompt":"Run a security audit on this OAuth client registration document and report any redirect URI vulnerabilities or misconfigured grant types — I need to know if it's safe to promote this to production."}],"resultDescription":"Returns a list of security findings for the submitted OAuth client registration, covering: wildcard redirect URIs that could let any matching host receive authorization codes, plaintext redirects outside the loopback address, registered URIs that embed their own redirect parameter enabling code forwarding, use of the implicit or password grant types, public clients registering grants that require a client secret, and client secrets committed into the registration document. No actual secret values are ever included in the response.","failureModes":["Invalid or malformed client object payload returns a validation error","Missing required client properties may result in incomplete audit coverage","Network timeout if the endpoint is unreachable","Payment failure via x402 protocol if insufficient USDC balance"],"whenToPreferThis":"Choose this endpoint when you need a fast, automated security review of an OAuth 2.0 client registration document — particularly during CI/CD pipelines, pre-launch security gates, or audits of legacy OAuth configurations. It is purpose-built for OAuth-specific vulnerability patterns and reports nuanced issues like open redirect chaining and grant-type mismatches that generic security scanners miss. Prefer this over manual review or generic API validators when OAuth client security compliance is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T18:31:37.612Z","isFirstParty":false,"canonicalSlug":"oauth-client-registration-security-auditor-147c480a"}