Is your Dynamic Client Registration an open-registration risk?

Grade an OAuth/OIDC authorization server's advertised Dynamic Client Registration (RFC 7591) exposure from its published discovery metadata — every finding cited, results shareable by permalink. This is a static, metadata-only check: it never registers a test client or POSTs to the registration endpoint. It grades "DCR is exposed; here's what to verify" — never "your DCR is open."