agent-ready-oauth-discovery git:20260716.c5d769eA

Immutable. This exact content is served forever at /api/v1/blob/3040d58b002b6a49.

---
name: agent-ready-oauth-discovery
description: >
  Sub-skill de agent-ready-cloudflare: Implement OAuth/OIDC Discovery
---
# Implement OAuth/OIDC Discovery

Publish OAuth or OpenID Connect discovery metadata so agents can authenticate
with your APIs.
See [OpenID Connect Discovery](http://openid.net/specs/openid-connect-discovery-1_0.html)
and [RFC 8414](https://www.rfc-editor.org/rfc/rfc8414).

## Requirements

- Serve JSON at `/.well-known/openid-configuration` (OIDC) or `/.well-known/oauth-authorization-server` (OAuth 2.0)
- Include `issuer`, `authorization_endpoint`, `token_endpoint`, `jwks_uri`
- List `grant_types_supported` and `response_types_supported`

## Cloudflare

[Cloudflare Access](https://developers.cloudflare.com/cloudflare-one/identity/)
can serve as an identity provider, or use Workers to proxy discovery metadata.

## Validate

```
POST https://isitagentready.com/api/scan
Content-Type: application/json

{"url": "https://YOUR-SITE.com"}
```

Check that `checks.discovery.oauthDiscovery.status` is `"pass"`.