OptionalallowAllow http:// and private-IP probe targets. Default false.
OptionalskipSkip the tools/call probe (e.g. if the agent doesn't expose a no-op tool).
OptionalprobeName of the tool to exercise in the tools/call probe. Default: get_products.
This default is AdCP-specific; for non-AdCP MCP agents, pass a tool name that exists.
OptionalprobeArguments to send with the probe tool call. Default: { brief: 'diagnose-auth probe' }.
OptionalskipSkip the token-refresh attempt even when a refresh_token is available.
OptionaltimeoutReplace the default timeout for individual HTTP probes (ms). Default inherits from ssrfSafeFetch (10s).
OptionalincludeInclude raw access_token / refresh_token / id_token values in the report.
Default false — tokens are replaced with <redacted length=N> markers so
that --json output is safe to paste into bug reports and log aggregators.
Options for runAuthDiagnosis. Most callers pass an
AgentConfigand accept the defaults.