# OAuth Client Registration Security Auditor

> OAuth Client Registration Security Auditor is a paid API for AI agents from api.zfinia.com, paid per call via x402, $0.3/call, status unknown (last checked 2026-10-11).

Audits an OAuth client registration document for common security vulnerabilities including wildcard redirect URIs, plaintext redirects, open redirect chaining, insecure grant types, and exposed client secrets.

## Facts

- Endpoint: POST https://api.zfinia.com/x402/v1/oauth-client-registration-audit?utm_source=zero.xyz
- Price: $0.3/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/oauth-client-registration-security-auditor-147c480a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_fhWA09UdGxAdKeolrEnYS

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability oauth-client-registration-security-auditor-147c480a -d '<json body>'
```

Example prompt: Can you audit this OAuth client registration for security issues — I want to know about any wildcard redirect URIs, plaintext redirects, open redirect chaining risks, insecure grant types like implicit or password, and whether the client secret is baked into the registration document?

## When to prefer this

Choose this endpoint when you need a fast, automated security review of an OAuth 2.0 client registration document — particularly during CI/CD pipelines, pre-launch security gates, or audits of legacy OAuth configurations. It is purpose-built for OAuth-specific vulnerability patterns and reports nuanced issues like open redirect chaining and grant-type mismatches that generic security scanners miss. Prefer this over manual review or generic API validators when OAuth client security compliance is required.

## Known failure modes

- Invalid or malformed client object payload returns a validation error
- Missing required client properties may result in incomplete audit coverage
- Network timeout if the endpoint is unreachable
- Payment failure via x402 protocol if insufficient USDC balance

## How this service works

Audit an OAuth client registration. Reports a wildcard redirect URI, where any matching host receives authorization codes; a plaintext redirect outside loopback; a registered URI that carries its own redirect parameter, so a code can be forwarded off the client's origin while still matching; the implicit and password grants; a public client registering a grant that needs a secret; and a client secret committed into the registration document itself. No secret value is ever reported.

## Output

Returns a list of security findings for the submitted OAuth client registration, covering: wildcard redirect URIs that could let any matching host receive authorization codes, plaintext redirects outside the loopback address, registered URIs that embed their own redirect parameter enabling code forwarding, use of the implicit or password grant types, public clients registering grants that require a client secret, and client secrets committed into the registration document. No actual secret values are ever included in the response.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "client": {
   "type": "object"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/oauth-client-registration-security-auditor-147c480a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.zfinia.com](https://www.zero.xyz/host/api.zfinia.com/llms.txt)