Auxen MCP ServerThis is the **public manifest repo** for the
ai.auxen/auxen
MCP Info
Overview
From the repository's own README, as read at the audited commit.
# Auxen MCP ServerThis is the **public manifest repo** for the Auxen MCP (Model Context Protocol) server. The server itself runs at `https://api.auxen.ai/mcp` — this repo exists so registries (Smithery, Glama, the official MCP registry) have a canonical place to read metadata from.## ConnectThe Auxen MCP server is a **remote, StreamableHTTP** server. Add it to your MCP client by URL:```https://api.auxen.ai/mcp```Authentication uses **OAuth 2.1 + PKCE** (recommended for browser-based clients) or a direct Auxen API key (`auxen_live_*` / `auxen_test_*`) sent as `Authorization: Bearer <key>`.### OAuth flowThe discovery metadata is at:- `https://api.auxen.ai/.well-known/oauth-authorization-server` (RFC 8414)- `https://api.auxen.ai/.well-known/oauth-protected-resource` (RFC 9728)Clients that support [Dynamic Client Registration (RFC 7591)](https://datatracker.ietf.org/doc/html/rfc7591) — including Claude.ai's Connectors Directory — can register themselves automatically. After registration the client redirects the user's browser to `https://api.auxen.ai/oauth/authorize`, the user logs in to Auxen and approves the connection on `https://auxen.ai/oauth/authorize`, and the client receives an authorization code that exchanges for an access token at `https://api.auxen.ai/oauth/token`.### Direct key (programmatic)For agents that don't go through a browser, generate an `auxen_live_*` (or `auxen_test_*`) key at <https://auxen.ai/dashboard/api-keys> and send it as `Authorization: Bearer <key>` on every MCP call.## Tools| Tool | Effect | Hint ||------|--------|------|| `auxen_list_models` | List available models, optionally filtered by size | read-only || `auxen_get_instance_status` | Get status, endpoint, api_key for an instance | read-only || `auxen_list_instances` | List all instances on the account | read-only || `auxen_get_balance` | Read USD credits + active subscriptions | read-only || `auxen_provision_model` | Provision a new model instance — **spends money** | destructive |
Details
- Source
- auxen-ai/auxen-mcp
- Transports
- streamable-http
- Tools
- Registered at runtime; the list could not be read from source.
- Stars
- 0 · pushed 105d ago
Trust audit
Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
streamable-http
Gates applied: no_behavioural_pass, no_license.
Audited 2026-09-13 · audit v0.4.0 · source sha df04f605838a · full audit: observations/trust-audit/mcp-server/auxen-ai__auxen.json · Report an issue or request a re-scan
Audit history
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-13 | df04f605838a | SAFE | B | 87 | source changed, verdict held |
Also audited
Servers with a similar trust profile.
Questions
What is the ai.auxen/auxen MCP server?
MCP Info
Is ai.auxen/auxen safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (87/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does ai.auxen/auxen need?
No credential environment variables were found in its source, so it appears to need none.
How does ai.auxen/auxen run?
It speaks streamable-http, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (df04f605838a), read on 2026-09-13. The repository is watched and re-audited when it changes.
Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13