Return dedicated Admin Agent authorization server metadata.

GET

/.well-known/oauth-authorization-server/oauth/admin-agent

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/.well-known/oauth-authorization-server/oauth/admin-agent

Responses

200

RFC 8414 metadata for the dedicated Admin Agent issuer.

Media type application/json

object

issuer

required

string format: uri

authorization_endpoint

required

string format: uri

token_endpoint

required

string format: uri

pushed_authorization_request_endpoint

required

string format: uri

jwks_uri

required

string format: uri

response_types_supported

required

Array<string>

grant_types_supported

required

Array<string>

token_endpoint_auth_methods_supported

required

Array<string>

code_challenge_methods_supported

required

Array<string>

scopes_supported

required

Array<string>

Allowed values: agent:read agent:user-data:read agent:write

require_pushed_authorization_requests

required

boolean

dpop_signing_alg_values_supported

Array<string>

client_id_metadata_document_supported

required

boolean

registration_endpoint

required

Restricted public-client registration endpoint for interactive Agent MCP hosts.

string format: uri

key

additional properties

Example

{
  "scopes_supported": [
    "agent:read"
  ],
  "client_id_metadata_document_supported": true
}

404

Agent access is disabled for the tenant.

Media type application/json

object

error

required

string

error_description

string

message

string

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example"
}

503

Agent access configuration could not be evaluated safely.

Media type application/json

object

error

required

string

error_description

string

message

string

key

additional properties

Example ^generated

{
  "error": "example",
  "error_description": "example",
  "message": "example"
}