Authorization server metadata

RFC 8414 authorization server metadata, also served at /.well-known/oauth-authorization-server. The CLI knows only the host’s name and reads every endpoint here; an AI agent reads the auth.md agent_auth block.

GET /api/cli/metadata

Authorization server metadata

cURL

curl --request GET \
  --url https://dev.simforge.ai/api/cli/metadata

200

{
  "issuer": "<string>",
  "resource": "<string>",
  "authorization_servers": [
    "<string>"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "authorization_endpoint": "<string>",
  "token_endpoint": "<string>",
  "device_authorization_endpoint": "<string>",
  "revocation_endpoint": "<string>",
  "userinfo_endpoint": "<string>",
  "scopes_supported": [
    "<string>"
  ],
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "<string>"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "token_endpoint_auth_methods_supported": [
    "none"
  ],
  "revocation_endpoint_auth_methods_supported": [
    "none"
  ],
  "simforge_bench_results": "<string>",
  "simforge_bench_packs": "<string>",
  "simforge_scenario_documents": "<string>",
  "simforge_cli_sessions_page": "<string>",
  "agent_auth": {
    "skill": "<string>",
    "identity_endpoint": "<string>",
    "claim_endpoint": "<string>",
    "identity_types_supported": [
      "service_auth"
    ],
    "events_endpoint": "<string>",
    "identity_assertion": {
      "assertion_types_supported": [
        "urn:ietf:params:oauth:token-type:id-jag"
      ],
      "trusted_issuers": [
        "<string>"
      ]
    },
    "events_supported": [
      "https://schemas.workos.com/events/agent/auth/identity/assertion/revoked"
    ]
  }
}

Response

200 - application/json

The server's endpoints, scopes and grants.

issuer · string · required

resource · string · required

The protected resource (/api/v1), as its RFC 9728 metadata names it.

authorization_servers · string[] · required

bearer_methods_supported · enum<string>[] · required

Available options: header

authorization_endpoint · string · required

token_endpoint · string · required

device_authorization_endpoint · string · required

revocation_endpoint · string · required

userinfo_endpoint · string · required

scopes_supported · string[] · required

response_types_supported · enum<string>[] · required

Available options: code

grant_types_supported · string[] · required

code_challenge_methods_supported · enum<string>[] · required

Available options: S256

token_endpoint_auth_methods_supported · enum<string>[] · required

Available options: none

revocation_endpoint_auth_methods_supported · enum<string>[] · required

Available options: none

simforge_bench_results · string · required

simforge_bench_packs · string · required

simforge_scenario_documents · string · required

simforge_cli_sessions_page · string · required

agent_auth · object · required

The auth.md profile: how an AI agent registers and is approved by a person.

Show child attributes