> ## Documentation Index
> Fetch the complete documentation index at: https://nevermined.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authorization Server Metadata (RFC 8414)

> Advertises the authorization, token, and device_authorization endpoints, the supported grants (including urn:ietf:params:oauth:grant-type:device_code), and the JWKS URI. scopes_supported is deliberately absent (#2397).



## OpenAPI

````yaml /api-reference/oauth-openapi.json get /.well-known/oauth-authorization-server
openapi: 3.0.0
info:
  title: Nevermined Authentication API
  description: >-
    The OAuth 2.1 + RFC 8628 device-flow ceremony and standards-based discovery
    endpoints an agent or connector uses to obtain and manage a Nevermined
    credential. These endpoints are root-mounted (not under /api/v1).
  version: 1.0.0
  contact: {}
servers:
  - url: https://api.sandbox.nevermined.app
    description: Sandbox
  - url: https://api.live.nevermined.app
    description: Live
security: []
tags:
  - name: Authentication - Ceremony
    x-group: Ceremony
    description: Authorization Code (PKCE) and RFC 8628 device grant.
  - name: Authentication - Connections
    x-group: Connections
    description: AgentBindings — the consent receipts a user manages.
  - name: Authentication - Discovery
    x-group: Discovery
    description: RFC 8414 / 9728 / JWKS metadata.
paths:
  /.well-known/oauth-authorization-server:
    get:
      tags:
        - Authentication - Discovery
      summary: Authorization Server Metadata (RFC 8414)
      description: >-
        Advertises the authorization, token, and device_authorization endpoints,
        the supported grants (including
        urn:ietf:params:oauth:grant-type:device_code), and the JWKS URI.
        scopes_supported is deliberately absent (#2397).
      responses:
        '200':
          description: RFC 8414 metadata
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                example:
                  issuer: https://api.sandbox.nevermined.app
                  authorization_endpoint: https://api.sandbox.nevermined.app/oauth/authorize
                  token_endpoint: https://api.sandbox.nevermined.app/oauth/token
                  device_authorization_endpoint: >-
                    https://api.sandbox.nevermined.app/oauth/device_authorization
                  jwks_uri: https://api.sandbox.nevermined.app/.well-known/jwks.json
                  grant_types_supported:
                    - authorization_code
                    - refresh_token
                    - urn:ietf:params:oauth:grant-type:device_code
                  code_challenge_methods_supported:
                    - S256

````

## Related topics

- [Authentication & Identity](/docs/integrate/authentication/overview.md)
- [Authentication for AI Agents](/docs/integrate/authentication/for-agents.md)
- [Device Flow (RFC 8628)](/docs/integrate/authentication/device-flow.md)
- [MCP](/docs/integrations/mcp.md)
- [Authorization Code + PKCE](/docs/integrate/authentication/oauth-authorization-code.md)