OAuth 2.0 Authorization Server Metadata (RFC 8414)
curl --request GET \
--url https://api.mudraid.ai/.well-known/oauth-authorization-serverimport requests
url = "https://api.mudraid.ai/.well-known/oauth-authorization-server"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.mudraid.ai/.well-known/oauth-authorization-server', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.mudraid.ai/.well-known/oauth-authorization-server",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.mudraid.ai/.well-known/oauth-authorization-server"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.mudraid.ai/.well-known/oauth-authorization-server")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.mudraid.ai/.well-known/oauth-authorization-server")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"issuer": "<string>",
"token_endpoint": "<string>",
"jwks_uri": "<string>",
"grant_types_supported": [
"client_credentials"
],
"token_endpoint_auth_methods_supported": [
"private_key_jwt",
"client_secret_basic"
],
"token_endpoint_auth_signing_alg_values_supported": [
"RS256",
"ES256"
],
"revocation_endpoint": "<string>",
"revocation_endpoint_auth_methods_supported": [
"<string>"
],
"authorization_endpoint": "<string>",
"response_types_supported": [
"<string>"
],
"code_challenge_methods_supported": [
"<string>"
],
"authorization_response_iss_parameter_supported": true,
"service_documentation": "<string>",
"x-mudraid-access-token-signing-alg-values-supported": [
"RS256"
],
"x-mudraid-supported-token-profiles": [
"mudraid-access-token-v2"
]
}oauth
OAuth 2.0 Authorization Server Metadata (RFC 8414)
Advertises only what this authorization server implements and has
enabled right now; fields for disabled capabilities are omitted rather
than listed. issuer is the exact iss stamped into access tokens.
scopes_supported is deliberately absent — scopes vary per protected
resource. The identity contract still classifies this document as a
live preview: its fields are capability-derived and may widen as
capabilities are enabled, so read them rather than hardcoding them.
Sets Cache-Control: public, max-age=3600. Answers 404 when the
deployment has disabled the metadata document.
GET
/
.well-known
/
oauth-authorization-server
OAuth 2.0 Authorization Server Metadata (RFC 8414)
curl --request GET \
--url https://api.mudraid.ai/.well-known/oauth-authorization-serverimport requests
url = "https://api.mudraid.ai/.well-known/oauth-authorization-server"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.mudraid.ai/.well-known/oauth-authorization-server', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.mudraid.ai/.well-known/oauth-authorization-server",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.mudraid.ai/.well-known/oauth-authorization-server"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.mudraid.ai/.well-known/oauth-authorization-server")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.mudraid.ai/.well-known/oauth-authorization-server")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"issuer": "<string>",
"token_endpoint": "<string>",
"jwks_uri": "<string>",
"grant_types_supported": [
"client_credentials"
],
"token_endpoint_auth_methods_supported": [
"private_key_jwt",
"client_secret_basic"
],
"token_endpoint_auth_signing_alg_values_supported": [
"RS256",
"ES256"
],
"revocation_endpoint": "<string>",
"revocation_endpoint_auth_methods_supported": [
"<string>"
],
"authorization_endpoint": "<string>",
"response_types_supported": [
"<string>"
],
"code_challenge_methods_supported": [
"<string>"
],
"authorization_response_iss_parameter_supported": true,
"service_documentation": "<string>",
"x-mudraid-access-token-signing-alg-values-supported": [
"RS256"
],
"x-mudraid-supported-token-profiles": [
"mudraid-access-token-v2"
]
}Response
Authorization-server metadata
Example:
["client_credentials"]
Example:
["private_key_jwt", "client_secret_basic"]
Example:
["RS256", "ES256"]
Present only when the refresh-token capability is enabled.
Present only when the human-delegation flow is enabled.
Example:
["RS256"]
Example:
["mudraid-access-token-v2"]

