client/oauth-refresh-token
Checkpoints
MUST (any failure zeroes the score — 5/5 passed)
| Checkpoint | Description | |
|---|---|---|
| ✓ | refresh-token-confidential | Refresh token values only ever appeared in POST bodies to the token endpoint |
| ✓ | bearer-token | All post-grant accepted MCP requests carried Authorization: Bearer; no token in any URL |
| ✓ | recovered-after-expiry | A tool call succeeded with a token issued after the first grant |
| ✓ | finish-job-success | Successfully called finish_job while authorized |
| ✓ | begin-job-success | Successfully called begin_job while authorized |
SHOULD (the score fraction — 0/1 passed)
| Checkpoint | Description | Detail | |
|---|---|---|---|
| ✗ | grant-types-refresh | Registration grant_types included refresh_token | registration grant_types did not include refresh_token |
Usage & cost
- Nominal cost
- $0.110
- Input tokens
- 6,319
- Output tokens
- 18,313
- Cache read
- 401,344
- Duration
- 410s
- Timestamp
- 2026-07-18 16:36:29Z
- Bench version
- 0.3.0
Cost is nominal (public API pricing): token usage × published rates; actual marginal cost is subscription-covered.