latestOpenAPI 3.0.02026-08-19219210532.7 KB

bd5a5f406bca

oauth2

metadata

Get Authorization Server Metadata

Proxies the OAuth 2.1 authorization server metadata from PropelAuth, including the dynamic client registration endpoint required by MCP clients.

get/.well-known/oauth-authorization-server

Response

Authorization Server Metadata

authorization_endpointstring uri

URL of the authorization server's authorization endpoint. This is REQUIRED unless no grant types are supported that use the authorization endpoint

code_challenge_methods_supportedstring[]

JSON array containing a list of Proof Key for Code Exchange (PKCE) code challenge methods supported by this authorization server

grant_types_supportedstring[]

JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports

introspection_endpointstring uri

URL of the authorization server's OAuth 2.0 introspection endpoint

introspection_endpoint_auth_methods_supportedstring[]

JSON array containing a list of client authentication methods supported by this introspection endpoint

introspection_endpoint_auth_signing_alg_values_supportedstring[]

JSON array containing a list of the JWS signing algorithms supported by the introspection endpoint for the signature on the JWT used to authenticate the client

issuerstring uri required

The authorization server's issuer identifier, which is a URL that uses the "https" scheme and has no query or fragment components

jwks_uristring uri

URL of the authorization server's JWK Set document. The referenced document contains the signing key(s) the client uses to validate signatures

op_policy_uristring uri

URL that the authorization server provides to the person registering the client to read about the authorization server's requirements on how the client can use the data

op_tos_uristring uri

URL that the authorization server provides to the person registering the client to read about the authorization server's terms of service

registration_endpointstring uri

URL of the authorization server's OAuth 2.0 Dynamic Client Registration endpoint

response_modes_supportedstring[]

JSON array containing a list of the OAuth 2.0 "response_mode" values that this authorization server supports

response_types_supportedstring[] required

JSON array containing a list of the OAuth 2.0 "response_type" values that this authorization server supports

revocation_endpointstring uri

URL of the authorization server's OAuth 2.0 revocation endpoint

revocation_endpoint_auth_methods_supportedstring[]

JSON array containing a list of client authentication methods supported by this revocation endpoint

revocation_endpoint_auth_signing_alg_values_supportedstring[]

JSON array containing a list of the JWS signing algorithms supported by the revocation endpoint for the signature on the JWT used to authenticate the client

scopes_supportedstring[]

JSON array containing a list of the OAuth 2.0 "scope" values that this authorization server supports

service_documentationstring uri

URL of a page containing human-readable information that developers might want or need to know when using the authorization server

signed_metadatastring

Signed JWT containing metadata values about the authorization server as claims

token_endpointstring uri

URL of the authorization server's token endpoint. This is REQUIRED unless only the implicit grant type is supported

token_endpoint_auth_methods_supportedstring[]

JSON array containing a list of client authentication methods supported by this token endpoint

token_endpoint_auth_signing_alg_values_supportedstring[]

JSON array containing a list of the JWS signing algorithms ("alg" values) supported by the token endpoint for the signature on the JWT used to authenticate the client

ui_locales_supportedstring[]

Languages and scripts supported for the user interface, represented as a JSON array of language tag values from BCP 47

userinfo_endpointstring uri

URL of the authorization server's userinfo endpoint