git:20260418.3c3158f to git:20260716.c5d769e

# Implement OAuth/OIDC Discovery

Publish OAuth or OpenID Connect discovery metadata so agents can authenticate

with your APIs.

See [OpenID Connect Discovery](http://openid.net/specs/openid-connect-discovery-1_0.html)

and [RFC 8414](https://www.rfc-editor.org/rfc/rfc8414).

## Requirements

- Serve JSON at `/.well-known/openid-configuration` (OIDC) or `/.well-known/oauth-authorization-server` (OAuth 2.0)

- Include `issuer`, `authorization_endpoint`, `token_endpoint`, `jwks_uri`

- List `grant_types_supported` and `response_types_supported`

## Cloudflare

[Cloudflare Access](https://developers.cloudflare.com/cloudflare-one/identity/)

can serve as an identity provider, or use Workers to proxy discovery metadata.

## Validate

```

POST https://isitagentready.com/api/scan

Content-Type: application/json

{"url": "https://YOUR-SITE.com"}

```

Check that `checks.discovery.oauthDiscovery.status` is `"pass"`.