OAuth Client Registration Security Auditor

API ↗

OAuth Client Registration Security Auditor is a paid API for AI agents from api.zfinia.com, paid per call via x402, $0.3/call, status unknown (last checked 2026-10-11).

Audits an OAuth client registration document for common security vulnerabilities including wildcard redirect URIs, plaintext redirects, open redirect chaining, insecure grant types, and exposed client secrets.

How this service works

Audit an OAuth client registration. Reports a wildcard redirect URI, where any matching host receives authorization codes; a plaintext redirect outside loopback; a registered URI that carries its own redirect parameter, so a code can be forwarded off the client's origin while still matching; the implicit and password grants; a public client registering a grant that needs a secret; and a client secret committed into the registration document itself. No secret value is ever reported.

Output

Returns a list of security findings for the submitted OAuth client registration, covering: wildcard redirect URIs that could let any matching host receive authorization codes, plaintext redirects outside the loopback address, registered URIs that embed their own redirect parameter enabling code forwarding, use of the implicit or password grant types, public clients registering grants that require a client secret, and client secrets committed into the registration document. No actual secret values are ever included in the response.