---
title: "OAuth authorization server metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["OAuth"]
---

# OAuth authorization server metadata

`GET /.well-known/oauth-authorization-server`

## Request

- Base URL: `https://xn--s7y.xn--3ds443g`
- URL: `https://xn--s7y.xn--3ds443g/.well-known/oauth-authorization-server`
- Auth: none required

RFC 8414. `issuer` is the public origin. Advertises authorization code and refresh token, response type `code`, PKCE `S256`, and token endpoint auth `none`. `client_id_metadata_document_supported` is false. `scopes_supported` is the issuable catalog, not the default grant.

## Response `200`

Authorization server metadata

- OAuthAuthorizationServerMetadata
  - `issuer` string, required
  - `authorization_endpoint` string, required
  - `token_endpoint` string, required
  - `registration_endpoint` string, required
  - `scopes_supported` string[], required
  - `response_types_supported` string[], required
  - `grant_types_supported` string[], required
  - `token_endpoint_auth_methods_supported` string[], required
  - `code_challenge_methods_supported` string[], required
  - `resource` string
  - `client_id_metadata_document_supported` false

---

[API](https://skmtc.dev/xn--s7y/apis/agent-api.md) · [All operations](https://skmtc.dev/xn--s7y/apis/agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xn--s7y/apis/agent-api/revisions/d902f68518e9?raw)