Skip to main content

For AI agents: the documentation index is at /llms.txt, and this page is available as Markdown at /api/auth/oauth-authorization-server-metadata.md.

Authorization server metadata

GET 

/.well-known/oauth-authorization-server

RFC 8414 discovery. A remote MCP client fetches this to learn where to register and authorize, having been configured with nothing but the MCP server URL.

issuer must equal the origin this document is served from, which is why it is mounted at the root rather than under /v1/auth. The endpoints it names do sit under that base path; RFC 8414 does not require them to share the issuer's prefix.

Served no-store: a client that cached this across a key or endpoint rotation would fail in a way that looks like our outage.

Responses​

The authorization server's published identity