OAuth

Authorization Server Metadata

RFC 8414 discovery document. Unauthenticated. Lets MCP/OAuth clients bootstrap the auth flow with no manual configuration — it advertises the authorization, token, registration, introspection, and revocation endpoints plus supported grant types, scopes, and PKCE methods.

get/.well-known/oauth-authorization-server

Request

  • Base URL: https://api.purplegrain.com
  • URL: https://api.purplegrain.com/.well-known/oauth-authorization-server
  • Auth: none declared

Response

Authorization server metadata.

issuerstring uri
authorization_endpointstring uri

May live on a different origin than the issuer (the frontend hosts the interactive consent screen, since sessions are disabled on the API).

token_endpointstring uri
registration_endpointstring uri
introspection_endpointstring uri
revocation_endpointstring uri
scopes_supportedstring[]
response_types_supportedstring[]
grant_types_supportedstring[]
token_endpoint_auth_methods_supportedstring[]
code_challenge_methods_supportedstring[]

Changes

No recorded changes to this operation across all 4 revisions of this API.