{
  "$schema": "https://static.modelcontextprotocol.io/schemas/v1/oauth-authorization-server.schema.json",
  "issuer": "https://leksehest.no",
  "authorization_endpoint": "https://leksehest.no/api/auth/authorize",
  "token_endpoint": "https://leksehest.no/api/auth/token",
  "revocation_endpoint": "https://leksehest.no/api/auth/revoke",
  "pushed_authorization_request_endpoint": "https://leksehest.no/api/auth/par",
  "jwks_uri": "https://leksehest.no/.well-known/jwks.json",
  "registration_endpoint": "https://leksehest.no/api/auth/register",
  "scopes_supported": [
    "openid",
    "profile",
    "email",
    "agent_access",
    "offline_access"
  ],
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token",
    "urn:ietf:params:oauth:grant-type:jwt-bearer"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "client_secret_basic",
    "private_key_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "ES256"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "dpop_signing_alg_values_supported": [
    "ES256"
  ],
  "authorization_response_iss_parameter_supported": true,
  "require_pushed_authorization_requests": true,
  "service_documentation": "https://leksehest.no/auth.md",
  "agent_auth": {
    "skill": "https://leksehest.no/auth.md",
    "register_uri": "https://leksehest.no/api/auth/register",
    "claim_uri": "https://leksehest.no/api/auth/claim",
    "revocation_uri": "https://leksehest.no/api/auth/revoke",
    "identity_types_supported": [
      "anonymous",
      "identity_assertion"
    ],
    "anonymous": {
      "credential_types_supported": [
        "api_key"
      ]
    },
    "identity_assertion": {
      "assertion_types_supported": [
        "urn:ietf:params:oauth:token-type:id-jag",
        "verified_email"
      ],
      "credential_types_supported": [
        "access_token",
        "api_key"
      ]
    }
  }
}