{"uid":"cap_lyP7BN1eGNpyb8gy0l1FF","slug":"oauth-server-metadata-discoverer-27392a8b","name":"OAuth Server Metadata Discoverer","description":"OAuth 2.0 authorization-server metadata (RFC 8414) with OpenID fallback: tries /.well-known/oauth-authorization-server then /.well-known/openid-configuration and returns the issuer, authorization/token/revocation/introspection/device endpoints, grant types, PKCE support, token auth methods, scopes, DPoP and PAR support. Also checks /.well-known/oauth-protected-resource for MCP-style resource metadata. $0.01 per server.","url":"https://intel.rallylive.ca/dev/oauth-metadata","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_onKQYuXReS6PTEza6F1CA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches OAuth 2.0 authorization-server metadata (RFC 8414) and OpenID Connect configuration for any server URL, returning endpoints, grant types, PKCE, DPoP, PAR, and scope support","exampleAgentPrompt":"Can you look up the OAuth authorization server metadata for https://auth.example.com — I need to know what endpoints it exposes, whether it supports PKCE and DPoP, and what grant types and scopes are available?","exampleUseCases":[{"title":"Pre-integration OAuth server audit","prompt":"Before I integrate with Okta's authorization server at https://dev-12345.okta.com, can you pull its OAuth metadata and tell me if it supports PKCE, what grant types it offers, and what the token and authorization endpoint URLs are?"},{"title":"MCP resource server capability check","prompt":"I need to connect an MCP client to https://api.myservice.io — can you fetch the OAuth protected resource metadata to see what authorization servers and scopes it requires?"},{"title":"Verify OpenID Connect provider support","prompt":"Check whether https://accounts.google.com supports OpenID Connect and DPoP, and give me the full list of supported scopes and token endpoint auth methods it advertises in its well-known configuration."}],"resultDescription":"Returns a structured object containing the issuer URL, authorization endpoint, token endpoint, revocation endpoint, introspection endpoint, device authorization endpoint, supported grant types, PKCE support flag, token endpoint authentication methods, supported scopes, DPoP support, PAR (Pushed Authorization Requests) support, and any MCP-style resource metadata from /.well-known/oauth-protected-resource if present.","failureModes":["Server does not expose any well-known OAuth or OpenID Connect metadata — returns empty or error response","Network timeout or unreachable host for the target server URL","Server returns malformed or non-compliant metadata JSON","Well-known endpoints exist but require authentication to access","Missing required fields like token_endpoint or issuer in the metadata response"],"whenToPreferThis":"Use this endpoint when you need to programmatically discover the OAuth 2.0 or OpenID Connect capabilities of any authorization server before integration — especially when you need to check for PKCE, DPoP, PAR, or device flow support, or when building agents that need to dynamically configure OAuth clients. Prefer this over manual documentation lookup when the server URL is known and you want a single structured response covering all standard RFC 8414 and OIDC discovery fields including MCP resource metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:10:21.285Z","isFirstParty":false}