OAuth Issuer Binding Evidence

Choose this endpoint when you need cryptographically-grounded, signed evidence that an OAuth issuer and audience are correctly bound to a specific receiver — particularly in agentic pipelines, zero-trust architectures, or compliance scenarios where a simple local JWT check is insufficient and you need an auditable third-party attestation of the binding.

• Issuer claim does not match a recognized or verifiable authority — returns validation failure with mismatch detail
• Audience claim does not correspond to the stated intended receiver — returns binding rejection
• Malformed or missing OAuth token claims — returns schema or parse error
• Receiver identity cannot be resolved or verified — returns unresolvable receiver error
• Upstream identity provider unreachable during issuer verification — returns timeout or connectivity error