OAuth Authorization Server Metadata Checker

Check for RFC 8414 authorization server metadata at /.well-known/oauth-authorization-server.

Fetches the OAuth 2.0 Authorization Server Metadata document, the standard way a server advertises its endpoints, supported scopes and grant types so a client can configure itself automatically. Only sites that actually act as an authorization server publish one.

This is one of the checks the AI Agent Readiness Checker scores under API, Auth, MCP & Skill Discovery, and it can also be run on its own for any URL.

Based on: RFC 8414 — OAuth 2.0 Authorization Server Metadata

About this validation

Fetches the RFC 8414 authorization server metadata document, the standardized way a server advertises its endpoints, scopes and supported grant types.

Protocol / standard:: RFC 8414 — OAuth 2.0 Authorization Server Metadata
Rules reviewed:: Nov 11, 2026

Standards and vendor-documented behavior can change. This reflects the source as last reviewed above, not a permanent guarantee.