Implement OAuth/OIDC Discovery

Publish OAuth or OpenID Connect discovery metadata so agents can authenticate with your APIs. See OpenID Connect Discovery and RFC 8414.

Requirements

  • Serve JSON at /.well-known/openid-configuration (OIDC) or /.well-known/oauth-authorization-server (OAuth 2.0)
  • Include issuer, authorization_endpoint, token_endpoint, jwks_uri
  • List grant_types_supported and response_types_supported

Cloudflare

Cloudflare Access can serve as an identity provider, or use Workers to proxy discovery metadata.

Validate

POST https://isitagentready.com/api/scan
Content-Type: application/json

{"url": "https://YOUR-SITE.com"}

Check that checks.discovery.oauthDiscovery.status is "pass".