---
title: "OAuth 2.0 Authorization Server Metadata."
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["OAuth2"]
---

# OAuth 2.0 Authorization Server Metadata.

`GET /.well-known/oauth-authorization-server`

OAuth 2.0 Authorization Server Metadata as defined by
[RFC 8414](https://www.rfc-editor.org/rfc/rfc8414).

Used by OAuth 2.0 clients (notably MCP clients performing the
Authorization Code + PKCE flow) to discover the URLs of the
authorization, token, and dynamic client registration endpoints
without out-of-band configuration. The endpoint is unauthenticated
and exposes CORS so it can be fetched from browsers.

The `registration_endpoint` is only advertised when Dynamic Client
Registration ([RFC 7591](https://www.rfc-editor.org/rfc/rfc7591))
is enabled on this workspace.

## Response `200`

Authorization server metadata document.

- object
  - `issuer` string, uri, required — URL identifying this authorization server.
  - `authorization_endpoint` string, uri, required — URL of the GitGuardian authorization endpoint (served by the GitGuardian dashboard, not the API).
  - `token_endpoint` string, uri, required — URL of the [token endpoint](#operation/public-oauth-token).
  - `registration_endpoint` string, uri — URL of the [Dynamic Client Registration endpoint](#operation/public-oauth-register). Only present when DCR is enabled.
  - `code_challenge_methods_supported` string[], required — PKCE code challenge methods supported.
  - `grant_types_supported` string[], required
  - `response_types_supported` string[], required
  - `scopes_supported` string[], required — Scopes that may be requested by clients.
  - `token_endpoint_auth_methods_supported` string[], required — Client authentication methods supported at the token endpoint.

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)