client/oauth-refresh-token
Checkpoints
MUST (any failure zeroes the score — 5/5 passed)
| Checkpoint | Description | |
|---|---|---|
| ✓ | refresh-token-confidential | Refresh token values only ever appeared in POST bodies to the token endpoint |
| ✓ | bearer-token | All post-grant accepted MCP requests carried Authorization: Bearer; no token in any URL |
| ✓ | recovered-after-expiry | A tool call succeeded with a token issued after the first grant |
| ✓ | finish-job-success | Successfully called finish_job while authorized |
| ✓ | begin-job-success | Successfully called begin_job while authorized |
SHOULD (the score fraction — 1/1 passed)
| Checkpoint | Description | |
|---|---|---|
| ✓ | grant-types-refresh | Registration grant_types included refresh_token |
Usage & cost
- Nominal cost
- $0.402
- Input tokens
- 33,746
- Output tokens
- 5,898
- Cache read
- 113,152
- Duration
- 306s
- Timestamp
- 2026-07-18 11:56:23Z
- Bench version
- 0.3.0
Cost is nominal (public API pricing): token usage × published rates; actual marginal cost is subscription-covered.