Agent skill · alirezarezvani
mcp-oauth-triage
Use when an MCP connector that used to authenticate now fails (tool calls 401 after a good token exchange, breaks after refresh, returns another account's data), before changing code. Classifies the fault with oauth_triage.py.
What it needs
About 9k tokens when loaded.
What this skill does
MCP OAuth Triage Tier: POWERFUL · Category: Engineering · Domain: AI / Auth / Connectors Overview An OAuth-backed MCP connector rarely fails at the exchange. It fails somewhere between storing what the exchange returned and reading it back on the next call, so the visible symptom is a wall of 401s while every dashboard says the connection is healthy. The cost of guessing is high because five common faults share one symptom and need opposite fixes. Rotating a client secret does nothing when the real fault is a writer and a reader disagreeing about which key holds the token. Re-authenticating cures a poisoned auth cache for a day and hides the actual defect. This skill exists to stop that guessing: collect three artifacts, run one classifier, fix the class you actually have. Use it before touching code, and again before declaring the fix done. When to Use A connector that authenticated yesterday returns 401 or 403 today with no configuration change. The token endpoint returns 200, but the first tool call after a refresh fails. Re-authenticating fixes the symptom, and the failure returns within one token lifetime. A multi-account install returns data belonging to the wrong account. A "needs auth" state persists after a successful login. A refresh loop hammers the token endpoint (429s, rotation churn) while the connector stays down. Do not use this skill for first-time setup that never worked. That is a scopes, redirect URI, or client registration problem, and it belongs with mcp-server-builder. This skill assumes a working state existed and was lost. Features One classifier covers five fault classes. Each row names the discriminator that separates it from its neighbours, because the fixes are destructive to each other. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/mcp-oauth-triage