← MCP servers · auxen-ai

Auxen MCP ServerThis is the **public manifest repo** for the

ai.auxen/auxen

SAFEgrade B · trust 87/100

MCP Info

Overview

From the repository's own README, as read at the audited commit.

# Auxen MCP ServerThis is the **public manifest repo** for the Auxen MCP (Model Context Protocol) server. The server itself runs at `https://api.auxen.ai/mcp` — this repo exists so registries (Smithery, Glama, the official MCP registry) have a canonical place to read metadata from.## ConnectThe Auxen MCP server is a **remote, StreamableHTTP** server. Add it to your MCP client by URL:```https://api.auxen.ai/mcp```Authentication uses **OAuth 2.1 + PKCE** (recommended for browser-based clients) or a direct Auxen API key (`auxen_live_*` / `auxen_test_*`) sent as `Authorization: Bearer <key>`.### OAuth flowThe discovery metadata is at:- `https://api.auxen.ai/.well-known/oauth-authorization-server` (RFC 8414)- `https://api.auxen.ai/.well-known/oauth-protected-resource` (RFC 9728)Clients that support [Dynamic Client Registration (RFC 7591)](https://datatracker.ietf.org/doc/html/rfc7591) — including Claude.ai's Connectors Directory — can register themselves automatically. After registration the client redirects the user's browser to `https://api.auxen.ai/oauth/authorize`, the user logs in to Auxen and approves the connection on `https://auxen.ai/oauth/authorize`, and the client receives an authorization code that exchanges for an access token at `https://api.auxen.ai/oauth/token`.### Direct key (programmatic)For agents that don't go through a browser, generate an `auxen_live_*` (or `auxen_test_*`) key at <https://auxen.ai/dashboard/api-keys> and send it as `Authorization: Bearer <key>` on every MCP call.## Tools| Tool | Effect | Hint ||------|--------|------|| `auxen_list_models` | List available models, optionally filtered by size | read-only || `auxen_get_instance_status` | Get status, endpoint, api_key for an instance | read-only || `auxen_list_instances` | List all instances on the account | read-only || `auxen_get_balance` | Read USD credits + active subscriptions | read-only || `auxen_provision_model` | Provision a new model instance — **spends money** | destructive |

Details

Source
auxen-ai/auxen-mcp
Transports
streamable-http
Tools
Registered at runtime; the list could not be read from source.
Stars
0 · pushed 105d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass, no_license.

Audited 2026-09-13 · audit v0.4.0 · source sha df04f605838a · full audit: observations/trust-audit/mcp-server/auxen-ai__auxen.json · Report an issue or request a re-scan

Audit history

DateSourceVerdictGradeScoreChange
2026-09-13df04f605838aSAFEB87source changed, verdict held

Also audited

Servers with a similar trust profile.

Questions

What is the ai.auxen/auxen MCP server?

MCP Info

Is ai.auxen/auxen safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (87/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does ai.auxen/auxen need?

No credential environment variables were found in its source, so it appears to need none.

How does ai.auxen/auxen run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (df04f605838a), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13