---
title: "Get Authorization Server Metadata"
method: GET
path: "/.well-known/oauth-authorization-server"
tags: ["oauth2", "metadata"]
---

# Get Authorization Server Metadata

`GET /.well-known/oauth-authorization-server`

Proxies the OAuth 2.1 authorization server metadata from PropelAuth, including the dynamic client registration endpoint required by MCP clients.

## Response `200`

Authorization Server Metadata

- OAuthMetadataGetAuthorizationServerMetadataResponseDTO
  - `authorization_endpoint` string, uri — URL of the authorization server's authorization endpoint. This is REQUIRED unless no grant types are supported that use the authorization endpoint
  - `code_challenge_methods_supported` string[] — JSON array containing a list of Proof Key for Code Exchange (PKCE) code challenge methods supported by this authorization server
  - `grant_types_supported` string[] — JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports
  - `introspection_endpoint` string, uri — URL of the authorization server's OAuth 2.0 introspection endpoint
  - `introspection_endpoint_auth_methods_supported` string[] — JSON array containing a list of client authentication methods supported by this introspection endpoint
  - `introspection_endpoint_auth_signing_alg_values_supported` string[] — JSON array containing a list of the JWS signing algorithms supported by the introspection endpoint for the signature on the JWT used to authenticate the client
  - `issuer` string, uri, required — The authorization server's issuer identifier, which is a URL that uses the "https" scheme and has no query or fragment components
  - `jwks_uri` string, uri — URL of the authorization server's JWK Set document. The referenced document contains the signing key(s) the client uses to validate signatures
  - `op_policy_uri` string, uri — URL that the authorization server provides to the person registering the client to read about the authorization server's requirements on how the client can use the data
  - `op_tos_uri` string, uri — URL that the authorization server provides to the person registering the client to read about the authorization server's terms of service
  - `registration_endpoint` string, uri — URL of the authorization server's OAuth 2.0 Dynamic Client Registration endpoint
  - `response_modes_supported` string[] — JSON array containing a list of the OAuth 2.0 "response_mode" values that this authorization server supports
  - `response_types_supported` string[], required — JSON array containing a list of the OAuth 2.0 "response_type" values that this authorization server supports
  - `revocation_endpoint` string, uri — URL of the authorization server's OAuth 2.0 revocation endpoint
  - `revocation_endpoint_auth_methods_supported` string[] — JSON array containing a list of client authentication methods supported by this revocation endpoint
  - `revocation_endpoint_auth_signing_alg_values_supported` string[] — JSON array containing a list of the JWS signing algorithms supported by the revocation endpoint for the signature on the JWT used to authenticate the client
  - `scopes_supported` string[] — JSON array containing a list of the OAuth 2.0 "scope" values that this authorization server supports
  - `service_documentation` string, uri — URL of a page containing human-readable information that developers might want or need to know when using the authorization server
  - `signed_metadata` string — Signed JWT containing metadata values about the authorization server as claims
  - `token_endpoint` string, uri — URL of the authorization server's token endpoint. This is REQUIRED unless only the implicit grant type is supported
  - `token_endpoint_auth_methods_supported` string[] — JSON array containing a list of client authentication methods supported by this token endpoint
  - `token_endpoint_auth_signing_alg_values_supported` string[] — JSON array containing a list of the JWS signing algorithms ("alg" values) supported by the token endpoint for the signature on the JWT used to authenticate the client
  - `ui_locales_supported` string[] — Languages and scripts supported for the user interface, represented as a JSON array of language tag values from BCP 47
  - `userinfo_endpoint` string, uri — URL of the authorization server's userinfo endpoint

---

[API](https://skmtc.net/wejam/apis/jam.md) · [All operations](https://skmtc.net/wejam/apis/jam/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wejam/jam/revisions/bd5a5f406bca/schema)