{"_id":"@agenticprimitives/mcp-oauth","_rev":"8-5585576710cc768eff8b7344e79b5ee0","name":"@agenticprimitives/mcp-oauth","dist-tags":{"latest":"0.0.0-alpha.8"},"versions":{"0.0.0-alpha.1":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.1","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.1","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"b81ca1a898d3fc233f50a8970038a86df98875bf","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.1.tgz","fileCount":28,"integrity":"sha512-pf8k8Y4Bywe5hA+iZmu2/nWfLZh0Oh/eJOyAQ0MpPBdW9etj7C9zP09mKQ4cDRuxuAy58gu5IGUuJabrSCBo0w==","signatures":[{"sig":"MEQCIAvm5lQMW/Kti6IhiiLFwUvKv62oH/dMCHfavrSga4VOAiAxEYJWmW6+r9fJ4Xof6jShwgGzCUWnVii04Za/0f79kQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":44222},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/7718ecda1860ab918399d6d6ec5ffa31/agenticprimitives-mcp-oauth-0.0.0-alpha.1.tgz","_integrity":"sha512-pf8k8Y4Bywe5hA+iZmu2/nWfLZh0Oh/eJOyAQ0MpPBdW9etj7C9zP09mKQ4cDRuxuAy58gu5IGUuJabrSCBo0w==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.16.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.1_1781714790981_0.6595315961827368","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.2":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.2","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.2","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"57a4ae9204bf4e1b34078bb80a4e1cecf6d4a895","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.2.tgz","fileCount":28,"integrity":"sha512-j7QD6sCfAJVF72eV9r2YMQ/Zqo161G2nCIP9pJeKTRLSZyAuPJprWacX7Qfv5d6tfXc0z3yM+kLLOe330wVsKg==","signatures":[{"sig":"MEUCIGifqjUjjNZPSOqWQ/D8cn6BpvCgi2v4RmAlYWBVeIeZAiEApN7ffQaDv1SQkyUEkleedBJ8cjdHDKxIdQLsAiajBJE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46443},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.2.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/f3eadaf94e23c97c45d57f1f13dac086/agenticprimitives-mcp-oauth-0.0.0-alpha.2.tgz","_integrity":"sha512-j7QD6sCfAJVF72eV9r2YMQ/Zqo161G2nCIP9pJeKTRLSZyAuPJprWacX7Qfv5d6tfXc0z3yM+kLLOe330wVsKg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.16.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.2_1781837984474_0.241671014502723","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.3":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.3","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.3","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"2042cf94658cb7723a98b8dbb78acdcc692fcf91","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.3.tgz","fileCount":28,"integrity":"sha512-fW+nIFb/ikjla9/aZfLYi6jvo6gvZGAbGHyXyoRFqOJ7m5d1t89GKOa96gtT1PNmzInm1Q/mtEPAlXqmZyLN+g==","signatures":[{"sig":"MEYCIQC+BGfQFJNRm5DKcPrZ1QmqV/s7GGxPlkaRIAioe+OJ2QIhALya7R18Bbk15AKtcGkzZrEHdhaUVocKBOAlH4W9dBmU","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":49186},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.3.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7a9f499b-1a0d-4e9f-95b5-08eec1b2322e"}},"_resolved":"/tmp/2708389344b7c06e2afffbe681244191/agenticprimitives-mcp-oauth-0.0.0-alpha.3.tgz","_integrity":"sha512-fW+nIFb/ikjla9/aZfLYi6jvo6gvZGAbGHyXyoRFqOJ7m5d1t89GKOa96gtT1PNmzInm1Q/mtEPAlXqmZyLN+g==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.16.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.18.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.21"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.21"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.3_1785727525557_0.8089766098819302","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.4":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.4","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.4","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"b67f11f92ab2ac394d2b13617de7837a49744aef","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.4.tgz","fileCount":28,"integrity":"sha512-Ty40T0+Wq9DCA0bfki/8J5nm/Uw+T2Wu+6mmrBzoAgV4ANTgscC9QIeEG+Y0RFpBxqdkhdCuoWUCNACkNsTLFw==","signatures":[{"sig":"MEYCIQDdfqAnHQcA3l3oeqS5MQ5a5PyD1qYS0ADB2LprBARP0gIhAIfOG5SXokPAkLektsQcjyxz4EveUq9oBKLHlWTPcaiH","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":49186},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.4.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7a9f499b-1a0d-4e9f-95b5-08eec1b2322e"}},"_resolved":"/tmp/6a3e11ec986024d09712ef7baa39ca5a/agenticprimitives-mcp-oauth-0.0.0-alpha.4.tgz","_integrity":"sha512-Ty40T0+Wq9DCA0bfki/8J5nm/Uw+T2Wu+6mmrBzoAgV4ANTgscC9QIeEG+Y0RFpBxqdkhdCuoWUCNACkNsTLFw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.17.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.19.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.22"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.22"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.4_1787775715842_0.6825643913291357","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.5":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.5","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.5","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"666f5059a48d42b13352e23c8591826acbd52f5a","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.5.tgz","fileCount":32,"integrity":"sha512-cKJe1cfrnIuc5H9tlmEVrq/YCJi/6lsEFjUf1NnG7oKrfqO9LrsRb7quJlzTsjJFpqS6p2MYl/zjnfqxmccV5A==","signatures":[{"sig":"MEQCIHNJ8brS93sz72aPtgmPXkFx5nLXyr3yc3oc+fDiwH6WAiBl+olFmTRshxt4uR3sZm/OydWZgAwu3l7bbEAJVgMU9Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIFAMds5gabufXZ2XwRBqUwmVtxVVEGtuaOQ8wgoajdgMAiB7ybsvnRvsA2Px+qPITE7ScdXre18xrjHDRGjeHO6hbg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84689},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.5.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7a9f499b-1a0d-4e9f-95b5-08eec1b2322e"}},"_resolved":"/tmp/e6b03a936c6b2bdb8deb2bc0b070e611/agenticprimitives-mcp-oauth-0.0.0-alpha.5.tgz","_integrity":"sha512-cKJe1cfrnIuc5H9tlmEVrq/YCJi/6lsEFjUf1NnG7oKrfqO9LrsRb7quJlzTsjJFpqS6p2MYl/zjnfqxmccV5A==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.19.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.23"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.23"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.5_1789164223793_0.7323685590252544","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.6":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.6","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.6","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"bcccb3164357e0f89db41aadad88ceb5c4405c45","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.6.tgz","fileCount":32,"integrity":"sha512-8z6wd0u3Ml9saOY/b6R0s/2nCiVWnOIENracZw3L5xosR9BrQoUMzKoRfChIZ0b/N7XM0uhniTvDKbDkSE7/Zw==","signatures":[{"sig":"MEUCIEXZV7Io91vt1TSQJGjvQCVK+RObPSvXZPDMDeGjiVe9AiEA7jTfq3BJ0UuOsPBEJb6Gf+9avouee8Hj34ju/fAUckw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIB/vhmym/jIugUkkJkI7I3LNLihnGpEddoukJuiw+LM/AiBwHymoGV87qvfHdD96SWALQk6Xu8oAwCDKSRfpWvivcg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84689},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.6.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7a9f499b-1a0d-4e9f-95b5-08eec1b2322e"}},"_resolved":"/tmp/497e153c7cce217b5198d2bd9d84abba/agenticprimitives-mcp-oauth-0.0.0-alpha.6.tgz","_integrity":"sha512-8z6wd0u3Ml9saOY/b6R0s/2nCiVWnOIENracZw3L5xosR9BrQoUMzKoRfChIZ0b/N7XM0uhniTvDKbDkSE7/Zw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.19.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.24"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.24"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.6_1789230602141_0.6509557484531872","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.7":{"name":"@agenticprimitives/mcp-oauth","version":"0.0.0-alpha.7","keywords":["agentic","primitives","mcp","oauth","grant-bundle"],"license":"MIT","_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.7","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/mcp-oauth","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"15398809a2a81b2fe0fbde4e985ce9f4f4fe74af","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.7.tgz","fileCount":32,"integrity":"sha512-kfWn9TaFUgP9EteTrDS+wmOZH0gfUqTdIY9eSq2LsGv/vpyChqRxSomYkLrvdkuz1OSjIoDTDF/Dxm+NFVbmXw==","signatures":[{"sig":"MEUCIB62P6yS81UarYqebQLTj+F0iklZZw6KQKqDGfdFlME4AiEA5cosilEUXYLINrdRdnpOULKsMDmbpNl41Z5cKOxRbnA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQDExnaDwV7s3g6BAzPeYklFEIL5pHPg3c0+n1H7TG1X9AIhAJePFTHSiJdW4PxonqG7xOL6qY2uNauvZ2C0fl4goVXP","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":84689},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.7.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/22b546cdac84f4d0e701ef5032a746da/agenticprimitives-mcp-oauth-0.0.0-alpha.7.tgz","_integrity":"sha512-kfWn9TaFUgP9EteTrDS+wmOZH0gfUqTdIY9eSq2LsGv/vpyChqRxSomYkLrvdkuz1OSjIoDTDF/Dxm+NFVbmXw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.16.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.25"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.25"},"_npmOperationalInternal":{"tmp":"tmp/mcp-oauth_0.0.0-alpha.7_1789501760555_0.05828225224192973","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.8":{"_id":"@agenticprimitives/mcp-oauth@0.0.0-alpha.8","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"d502b8afdea2a0708f464b44dfef105d5861e9f3","tarball":"https://registry.npmjs.org/@agenticprimitives/mcp-oauth/-/mcp-oauth-0.0.0-alpha.8.tgz","fileCount":32,"integrity":"sha512-2eHO9QK7IlVOTRgW0zoqBZLnuy7MATyL4dSVJyMpoBQLhrWb7NKC2xFkbIJGJKUkZVPq34SSyMy20svkjwf1NQ==","signatures":[{"sig":"MEYCIQC0/ukqom5MtscYsn1VCS6Fj5/91zkhukE1TjFe2wT+vAIhAO5FPxbyrtY2hxaLJ9X3IrXrIBFpD/4xxuEM8YPWB5T6","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIBCAet3h8jDoKGlbce3vfxViBBISbpMx2bq/4okF7j1iAiB7nnb6U//apT7Ds7FaW2gx+cX8imLvyf2c2HSggbwctA=="}],"unpackedSize":85186},"main":"./dist/index.js","name":"@agenticprimitives/mcp-oauth","type":"module","_from":"file:agenticprimitives-mcp-oauth-0.0.0-alpha.8.tgz","types":"./dist/index.d.ts","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"license":"MIT","scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit","test:watch":"vitest"},"version":"0.0.0-alpha.8","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7a9f499b-1a0d-4e9f-95b5-08eec1b2322e"}},"homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","mcp","oauth","grant-bundle","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"_resolved":"/tmp/c353ddd2f0d66941ccad1c09017ac7a2/agenticprimitives-mcp-oauth-0.0.0-alpha.8.tgz","_integrity":"sha512-2eHO9QK7IlVOTRgW0zoqBZLnuy7MATyL4dSVJyMpoBQLhrWb7NKC2xFkbIJGJKUkZVPq34SSyMy20svkjwf1NQ==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"_npmVersion":"11.19.0","description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","directories":{},"maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.26"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.26"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp-oauth_0.0.0-alpha.8_1789814963836_0.3274490168076287"}}},"time":{"created":"2026-06-17T16:46:30.834Z","modified":"2026-09-19T10:49:24.091Z","0.0.0-alpha.1":"2026-06-17T16:46:31.119Z","0.0.0-alpha.2":"2026-06-19T02:59:44.662Z","0.0.0-alpha.3":"2026-08-03T03:25:25.692Z","0.0.0-alpha.4":"2026-08-26T20:21:55.973Z","0.0.0-alpha.5":"2026-09-11T22:03:43.875Z","0.0.0-alpha.6":"2026-09-12T16:30:02.242Z","0.0.0-alpha.7":"2026-09-15T19:49:20.670Z","0.0.0-alpha.8":"2026-09-19T10:49:23.944Z"},"bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"license":"MIT","homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","mcp","oauth","grant-bundle","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/mcp-oauth"},"description":"MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"readme":"# @agenticprimitives/mcp-oauth\n\n> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)\n\nMCP **OAuth compatibility** adapter + **Agentic Grant Bundle** bridge (spec 277). OAuth is an ingress\nadapter for public HTTP MCP clients — **not** the vault authority. A validated token references a grant\nbundle by id+hash; the normal delegated vault path runs off the bundle.\n\n```ts\nimport { validateMcpBearerToken, resolveGrantBundleFromToken, buildInsufficientScopeResponse } from '@agenticprimitives/mcp-oauth';\n\nconst v = await validateMcpBearerToken(parseBearer(req.headers.get('authorization')), {\n  verify: (tok) => jwks.verify(tok),          // injected: signature + decode → claims\n  audience: 'https://mcp.example.com/mcp',\n  requiredScopes: ['mcp:invoke', 'vault:pii:read'],\n  requireGrantBinding: true,\n});\nif (!v.ok) return v.reason === 'insufficient_scope'\n  ? buildInsufficientScopeResponse({ missingScopes: v.missingScopes!, resourceMetadataUrl })\n  : buildUnauthorizedResponse({ resourceMetadataUrl });\n\nconst r = await resolveGrantBundleFromToken(v.claims, grantBundleStore);  // store injected\n// r.bundle → delegation/entitlement hashes → normal delegated vault path\n```\n\nDependency-free + runtime-agnostic. The authorization server, JWT/JWKS verification, and the encrypted\ngrant-bundle store live in the app/runtime. An inbound MCP token is never reused downstream. See\n[spec 277 §6–§8, §15](../../specs/277-mcp-delegated-vault-authorization.md).\n","readmeFilename":"README.md","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"}}