Public

Get OAuth authorization server metadata

RFC 8414 authorization server metadata for the MCP OAuth ceremony. Served at the issuer root, beside the JWKS, because the standard requires it there.

get/.well-known/oauth-authorization-server

Request

Base URL: https://api.proof.holdings
URL: https://api.proof.holdings/.well-known/oauth-authorization-server
Auth: none declared

Response

Authorization server metadata

issuerstring uri required

authorization_endpointstring uri required

token_endpointstring uri required

registration_endpointstring uri required

RFC 7591 dynamic client registration. Open by measurement, not by preference: without this field every client built on the shared MCP SDK refuses the server outright.

revocation_endpointstring uri required

response_types_supportedstring[] required

grant_types_supportedstring[] required

code_challenge_methods_supportedstring[] required

token_endpoint_auth_methods_supportedstring[] required

scopes_supportedstring[] required

The API-key scope vocabulary (an issued access token IS an API key) minus the scopes this surface never issues: the auth:* family, billing:write and billing:*.

service_documentationstring uri required

Example response

{
  "issuer": "https://api.proof.holdings",
  "authorization_endpoint": "https://api.proof.holdings/api/v1/mcp-oauth/authorize",
  "token_endpoint": "https://api.proof.holdings/api/v1/mcp-oauth/token",
  "registration_endpoint": "https://api.proof.holdings/api/v1/mcp-oauth/register",
  "revocation_endpoint": "https://api.proof.holdings/api/v1/mcp-oauth/revoke",
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "token_endpoint_auth_methods_supported": [
    "none"
  ],
  "scopes_supported": [
    "proofs:read",
    "verifications:read"
  ],
  "service_documentation": "https://proof.holdings/docs"
}

Changes

No recorded changes to this operation across all 2 revisions of this API.