OAuth discovery

Get authorization server metadata (RFC 8414)

Endpoint URLs and capabilities of the MCP authorization server. Public, unauthenticated and CORS-open on the same terms as the protected-resource document. code_challenge_methods_supported: ["S256"] is load-bearing: it is the only machine-readable statement that PKCE is mandatory and that plain will be rejected. Dynamic client registration (RFC 7591) is advertised; client-id metadata documents (CIMD) deliberately are not. Cached for one hour.

get/.well-known/oauth-authorization-server

Request

  • Base URL: https://api.elaichi.ai
  • URL: https://api.elaichi.ai/.well-known/oauth-authorization-server
  • Auth: none required

Response

OK

issuerstring uri
authorization_endpointstring uri
token_endpointstring uri
registration_endpointstring uri
revocation_endpointstring uri
response_types_supportedstring[]
grant_types_supportedstring[]
code_challenge_methods_supportedstring[]
token_endpoint_auth_methods_supportedstring[]
revocation_endpoint_auth_methods_supportedstring[]
scopes_supportedstring[]
service_documentationstring uri

Changes

No recorded changes to this operation across all 1 revision of this API.