For AI agents: the documentation index is at /llms.txt, and this page is available as Markdown at /api/auth/oauth-authorization-server-metadata.md.
Authorization server metadata
GET/.well-known/oauth-authorization-server
RFC 8414 discovery. A remote MCP client fetches this to learn where to register and authorize, having been configured with nothing but the MCP server URL.
issuer must equal the origin this document is served from, which is
why it is mounted at the root rather than under /v1/auth. The
endpoints it names do sit under that base path; RFC 8414 does not
require them to share the issuer's prefix.
Served no-store: a client that cached this across a key or endpoint
rotation would fail in a way that looks like our outage.
Responses
- 200
The authorization server's published identity