OC-CFG-012: Invalid MCP OAuth Config - OpenCode
Summary
- Rule ID:
OC-CFG-012 - Severity:
HIGH - Category:
OpenCode - Normative Level:
MUST - Auto-Fix:
No - Verified On:
2026-03-06
Applicability
- Tool:
opencode - Version Range:
unspecified - Spec Revision:
unspecified
Evidence Sources
Test Coverage Metadata
- Unit tests:
true - Fixture tests:
true - E2E tests:
false
Examples
The following examples demonstrate what triggers this rule and how to fix it.
Invalid
{
"mcp": { "srv": { "oauth": { "client_id": "abc" } } }
}
Valid
{
"mcp": { "srv": { "oauth": { "client_id": "abc", "authorization_url": "https://auth.example.com" } } }
}