<!-- llms.txt: https://workos.com/llms.txt -->

# Metadata

Connect exposes several metadata endpoints in order to be compatible with a wide array of clients that support discovery and automatic configuration.

### OAuth Authorization Server

This endpoint provides [RFC 6749](https://datatracker.ietf.org/doc/html/rfc6749)-compatible OAuth Authorization Server metadata.

Model Context Protocol (MCP) clients that support the latest version of the specification use this endpoint. [Read more here](https://workos.com/docs/authkit/mcp) about how to use AuthKit as an authorization server for an MCP server.

:::code-group

```bash language="curl" title="Request" tab="1"
curl https://authkit_domain/.well-known/oauth-authorization-server
```

```json language="json" title="Response" tab="2"
{
  "authorization_endpoint": "https://authkit_domain/oauth2/authorize",
  "code_challenge_methods_supported": ["S256"],
  "grant_types_supported": ["authorization_code", "refresh_token"],
  "introspection_endpoint": "https://authkit_domain/oauth2/introspection",
  "issuer": "https://authkit_domain",
  "registration_endpoint": "https://authkit_domain/oauth2/register",
  "scopes_supported": ["email", "offline_access", "openid", "profile"],
  "response_modes_supported": ["query"],
  "response_types_supported": ["code"],
  "token_endpoint": "https://authkit_domain/oauth2/token",
  "token_endpoint_auth_methods_supported": [
    "none",
    "client_secret_post",
    "client_secret_basic"
  ]
}
```

:::

### OpenID configuration

This discovery endpoint provides the standard configuration for OpenID clients to interact with WorkOS Connect.

:::code-group

```bash language="curl" title="Request" tab="1"
curl https://authkit_domain/.well-known/openid-configuration
```

```json language="json" title="Response" tab="2"
{
  "issuer": "https://authkit_domain",
  "authorization_endpoint": "https://authkit_domain/oauth2/authorize",
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token"
  ],
  "id_token_signing_alg_values_supported": ["RS256"],
  "introspection_endpoint": "https://authkit_domain/oauth2/introspection",
  "jwks_uri": "https://authkit_domain/oauth2/jwks",
  "response_types_supported": ["code"],
  "subject_types_supported": ["public"],
  "token_endpoint": "https://authkit_domain/oauth2/token",
  "userinfo_endpoint": "https://authkit_domain/oauth2/userinfo"
}
```

:::