---
title: "Publish OAuth server settings · Agent Wranglers"
url: https://agentwranglers.se/playbook/website/standard-addresses/oauth-authorization-server
updated: 2026-10-20
licence: "All rights reserved"
---

# Publish OAuth server settings

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Optional
- Chapter: [Standard addresses](https://agentwranglers.se/playbook/website/standard-addresses)
- Rule: If you run an OAuth authorisation server, publish its details at `/.well-known/oauth-authorization-server`.
- How: Serve the details as JSON, in the format RFC 8414 sets out. If the issuer has a path, such as `https://example.com/tenant1`, insert the well-known name before it, as in `/.well-known/oauth-authorization-server/tenant1`. List `code_challenge_methods_supported` with `S256`, because clients such as MCP clients refuse servers without PKCE.
- Check: Fetch the file. Its `issuer` equals the issuer URL exactly, and every endpoint it lists answers.

Example:

```json
{
  "issuer": "https://example.com",
  "authorization_endpoint": "https://example.com/oauth/authorize",
  "token_endpoint": "https://example.com/oauth/token",
  "response_types_supported": ["code"],
  "code_challenge_methods_supported": ["S256"]
}
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/standard-addresses/oauth-authorization-server`.

- Previous: [Publish identity provider settings](https://agentwranglers.se/playbook/website/standard-addresses/openid-configuration)
- Next: [Explain how to get API access](https://agentwranglers.se/playbook/website/standard-addresses/oauth-protected-resource)
- [Standard addresses](https://agentwranglers.se/playbook/website/standard-addresses)