Tool

OpenCode

Observed OAuth behavior for this client.

Latest behavior: CIMD metadata URL

Latest OAuth behavior: CIMD metadata URL
Behavior evidence: opencode authorization used client_id metadata URL https://opencode.ai/oauth/opencode/client.json.
Behavior observed at: 2026-10-28T20:51:35.048Z
Name source: Known product association
Identity association: Matched an explicitly configured metadata URL or trusted metadata namespace.
Last successful metadata URL: https://opencode.ai/oauth/opencode/client.json
Vendor: Unknown
Source URL: https://opencode.ai/oauth/opencode/client.json
Claimed status: unknown

OAuth client identities

Names reported by a client describe its own registration. The client ID and issuer identify the OAuth client.

Client ID: https://opencode.ai/oauth/opencode/client.json
Issuer: Not recorded
Registration method: CIMD metadata URL
Reported name: opencode

MCP protocol version history

Newest protocol versions first, then most recently seen. Repeated client releases and version outcomes are counted together. Protocol acceptance and request outcomes are shown separately; an unsupported method does not reject an accepted version. A counter-offer or discovery response does not prove the client used that version. New observations from token-linked sessions are associated with the exact OAuth identity; older observations without an identity link remain on the global protocol history.

No protocol observations are linked to this OAuth identity yet. Historical observations without an identity link remain on the global protocol history.

No protocol versions recorded yet. Reconnect the MCP client and make a request to capture its version.

Last Successful CIMD Metadata

2026-10-28T20:51:35.330Z

Name in CIMD metadata: opencode
Client URI: https://opencode.ai
Logo URI: https://opencode.ai/web-app-manifest-512x512.png
Grant types: authorization_code, refresh_token
Response types: code
Token endpoint auth method: none
Application type: native
Redirect URIs: http://127.0.0.1/callback, http://localhost/callback, http://127.0.0.1/mcp/oauth/callback

Latest OAuth Attempt

Timestamp: 2026-10-28T20:51:35.808Z
Path: POST /token
Client ID: https://opencode.ai/oauth/opencode/client.json
Client name: opencode
Client version: latest/2.2.0/cli
Redirect URI: http://127.0.0.1:51830/callback
Scope: Unknown
PKCE: Unknown
User agent: opencode/latest/2.2.0/cli

Latest CIMD Check

Passed at 2026-10-28T20:51:35.330Z

Errors

No validation errors.

Warnings

No validation warnings.

Raw metadata JSON

{
  "client_id": "https://opencode.ai/oauth/opencode/client.json",
  "client_name": "opencode",
  "client_uri": "https://opencode.ai",
  "logo_uri": "https://opencode.ai/web-app-manifest-512x512.png",
  "application_type": "native",
  "redirect_uris": [
    "http://127.0.0.1/callback",
    "http://localhost/callback",
    "http://127.0.0.1/mcp/oauth/callback"
  ],
  "grant_types": [
    "authorization_code",
    "refresh_token"
  ],
  "response_types": [
    "code"
  ],
  "token_endpoint_auth_method": "none",
  "token_endpoint_auth_methods_supported": [
    "none"
  ]
}