---
title: "Get authorization server metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["metadata"]
---

# Get authorization server metadata

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://your-tenant.us.qlikcloud.com`
- URL: `https://your-tenant.us.qlikcloud.com/.well-known/oauth-authorization-server`
- Auth: none declared

Returns authorization server metadata.

## Response `200`

Returns authorization server metadata.

- OauthMetadata
  - `issuer` string: The issuer of the tokens.
  - `jwks_uri` string, uri: The public keys endpoint.
  - `token_endpoint` string, uri: The token endpoint.
  - `revocation_endpoint` string, uri: The token endpoint.
  - `grant_types_supported` unknown[]: List of supported grant types.
    - unknown
  - `registration_endpoint` string, uri: The dynamic client registration endpoint.
  - `authorization_endpoint` string, uri: The authorization endpoint.
  - `response_types_supported` unknown[]: List of supported authorization code responses.
    - unknown
  - `client_id_metadata_document_supported` boolean: Advertises CIMD authentication support.
  - `token_endpoint_auth_methods_supported` string[]: List of supported OAuth client authentication methods.

## Changes

- **2026-09-29** `2eda4151db4c`: 3 info
  - added the optional property `client_id_metadata_document_supported` to the response with the `200` status
  - added the optional property `registration_endpoint` to the response with the `200` status
  - added the optional property `token_endpoint_auth_methods_supported` to the response with the `200` status

[Operation history](https://skmtc.dev/qlik/apis/well-known/changes/.well-known/oauth-authorization-server/get.md)

---

[API](https://skmtc.dev/qlik/apis/well-known.md) - [All operations](https://skmtc.dev/qlik/apis/well-known/llms.txt) - [OpenAPI document](https://skmtc.dev/qlik/apis/well-known/revisions/2eda4151db4c?raw)