generated: '2026-09-23'
method: searched
source: openapi/lastdatabase-openapi.yml; https://lastdatabase.com/trust-center; https://lastdatabase.com/.well-known/oauth-authorization-server
standards:
- id: openapi-3.1
  conforms: true
  evidence: the document declares 3.1.0
- id: oauth2
  conforms: false
  evidence: 'securitySchemes: bearerAuth (http)'
- id: rfc9457
  conforms: false
  evidence: no response declares application/problem+json
- id: idempotency
  conforms: false
  evidence: no idempotency key parameter on mutating operations
- id: pagination
  conforms: true
  evidence: list operations take limit
- id: iso-27001
  conforms: true
  claimed: true
  evidence: 'https://lastdatabase.com/trust-center: "LastDatabase is ISO/IEC 27001 certified by Moody." (provider claim, no certificate number
    published)'
- id: gdpr
  conforms: true
  claimed: true
  evidence: 'https://lastdatabase.com/trust-center: "LastDatabase is fully compliant with the General Data Protection Regulation (GDPR) and the
    California Consumer Privacy Act (CCPA)."'
- id: ccpa
  conforms: true
  claimed: true
  evidence: https://lastdatabase.com/trust-center (same sentence as gdpr)
- id: rfc8414
  conforms: true
  evidence: https://lastdatabase.com/.well-known/oauth-authorization-server returns 200 application/json authorization-server metadata (MCP surface)
- id: rfc9728
  conforms: true
  evidence: https://lastdatabase.com/.well-known/oauth-protected-resource/mcp returns 200 JSON; POST /mcp returns 401 with WWW-Authenticate resource_metadata
    pointing at it
- id: rfc7636-pkce
  conforms: true
  evidence: 'code_challenge_methods_supported: ["S256"] in the authorization-server metadata'
note: 'Derived from the provider''s own OpenAPI only: what the contract declares. Claims the contract cannot carry (PCI DSS, SOC 2, FAPI, ISO
  20022) come from the documentation reader and are merged below when found. The oauth2 row reads the REST contract (Bearer API key); the MCP
  server separately uses OAuth 2.0 authorization code + PKCE (rows rfc8414, rfc9728, rfc7636-pkce).'