Auth type: OAuth without client registration
16 endpoints use OAuth without client registration: 0 listed tools to a client with no credentials and 16 answered with a sign-in challenge (tools not seen, not counted). Rows run from Andi to Zoom. The server publishes OAuth metadata but no registration endpoint, so a client must be registered by hand or identified by a client ID metadata document.
Rows
| Company | MCP server | CLI |
|---|---|---|
| Andi andiai.com | Sign-in required OAuth; tools not seen, not counted | – |
| Bigdata.com bigdata.com | Sign-in required OAuth; tools not seen, not counted | – |
| Box box.com | Sign-in required OAuth; tools not seen, not counted | – |
| Cloudglue cloudglue.dev | Sign-in required OAuth; tools not seen, not counted; endpoint found by subdomain guess; it answered with a sign-in challenge and was not verified | – |
| ConfigCat configcat.com | Sign-in required OAuth; tools not seen, not counted; endpoint found by subdomain guess; it answered with a sign-in challenge and was not verified | – |
| GitHub github.com | Sign-in required OAuth; tools not seen, not counted | – |
| Githubcopilot githubcopilot.com | Sign-in required OAuth; tools not seen, not counted | – |
| HubSpot hubspot.com | Sign-in required OAuth; tools not seen, not counted | @hubspot/cli |
| Inttegro inttegro.com | Sign-in required OAuth; tools not seen, not counted | – |
| Microsoft 365 cloud.microsoft | Sign-in required OAuth; tools not seen, not counted | – |
| Pantheon pantheon.io | Sign-in required OAuth; tools not seen, not counted; endpoint found by subdomain guess; it answered with a sign-in challenge and was not verified | – |
| Render render.com | Sign-in required OAuth; tools not seen, not counted | – |
| Sherweb sherweb.com | Sign-in required OAuth; tools not seen, not counted | – |
| Slack slack.com | Sign-in required OAuth; tools not seen, not counted | – |
| Uptime.com :) uptime.com | Sign-in required OAuth; tools not seen, not counted; endpoint found by subdomain guess; it answered with a sign-in challenge and was not verified | – |
| Zoom zoom.us | Sign-in required OAuth; tools not seen, not counted | – |
Ora score is Ora's cached score and grade for the company's domain, read on 5 November 2026 from GET /api/score/{domain}, or from Ora's GET /api/leaderboard of the same day where that was read first (a vendor-published figure). A blank cell means Ora returned no cached score for the domain, or the domain was not read.
MCP status
Auth type