# OAuth Server Metadata Discoverer

> OAuth Server Metadata Discoverer is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Fetches OAuth 2.0 authorization-server metadata (RFC 8414) and OpenID Connect configuration for any server URL, returning endpoints, grant types, PKCE, DPoP, PAR, and scope support

## Facts

- Endpoint: GET https://intel.rallylive.ca/dev/oauth-metadata
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/oauth-server-metadata-discoverer-27392a8b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lyP7BN1eGNpyb8gy0l1FF

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability oauth-server-metadata-discoverer-27392a8b
```

Example prompt: Can you look up the OAuth authorization server metadata for https://auth.example.com — I need to know what endpoints it exposes, whether it supports PKCE and DPoP, and what grant types and scopes are available?

## When to prefer this

Use this endpoint when you need to programmatically discover the OAuth 2.0 or OpenID Connect capabilities of any authorization server before integration — especially when you need to check for PKCE, DPoP, PAR, or device flow support, or when building agents that need to dynamically configure OAuth clients. Prefer this over manual documentation lookup when the server URL is known and you want a single structured response covering all standard RFC 8414 and OIDC discovery fields including MCP resource metadata.

## Known failure modes

- Server does not expose any well-known OAuth or OpenID Connect metadata — returns empty or error response
- Network timeout or unreachable host for the target server URL
- Server returns malformed or non-compliant metadata JSON
- Well-known endpoints exist but require authentication to access
- Missing required fields like token_endpoint or issuer in the metadata response

## How this service works

OAuth 2.0 authorization-server metadata (RFC 8414) with OpenID fallback: tries /.well-known/oauth-authorization-server then /.well-known/openid-configuration and returns the issuer, authorization/token/revocation/introspection/device endpoints, grant types, PKCE support, token auth methods, scopes, DPoP and PAR support. Also checks /.well-known/oauth-protected-resource for MCP-style resource metadata. $0.01 per server.

## Output

Returns a structured object containing the issuer URL, authorization endpoint, token endpoint, revocation endpoint, introspection endpoint, device authorization endpoint, supported grant types, PKCE support flag, token endpoint authentication methods, supported scopes, DPoP support, PAR (Pushed Authorization Requests) support, and any MCP-style resource metadata from /.well-known/oauth-protected-resource if present.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/oauth-server-metadata-discoverer-27392a8b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)