Authorization server · Discovery

Authorization server metadata discoverable

The authorization server publishes metadata via OAuth 2.0 Authorization Server Metadata (RFC 8414) or OpenID Connect Discovery.

mcp.as.metadata

In revision 2026-07-28

Level
MUST
Defined in
Authorization Server Discovery › Authorization Server Metadata DiscoveryMCP Authorization 2026-07-28
Party
Authorization server
Observable
passive Observable by reading published metadata, without any request to the server.

Level by revision

RevisionLevelSection
2026-07-28currentMUSTAuthorization Server Discovery › Authorization Server Metadata Discovery
2025-11-25MUSTAuthorization Server Discovery › Authorization Server Metadata Discovery

Adoption across listed servers

  • Supported6
  • Partial0
  • Unsupported0
  • Unknown28
  • Not applicable5