/oauth-discovery

name: agent-ready-oauth-discovery
description: >
  Sub-skill de agent-ready-cloudflare: Implement OAuth/OIDC Discovery

Implement OAuth/OIDC Discovery

Publish OAuth or OpenID Connect discovery metadata so agents can authenticate with your APIs. See [OpenID Connect Discovery](http://openid.net/specs/openid-connect-discovery-1_0.html) and [RFC 8414](https://www.rfc-editor.org/rfc/rfc8414).

Requirements

• Serve JSON at `/.well-known/openid-configuration` (OIDC) or `/.well-known/oauth-authorization-server` (OAuth 2.0)
• Include `issuer`, `authorization_endpoint`, `token_endpoint`, `jwks_uri`
• List `grant_types_supported` and `response_types_supported`

Cloudflare

[Cloudflare Access](https://developers.cloudflare.com/cloudflare-one/identity/) can serve as an identity provider, or use Workers to proxy discovery metadata.

Validate

POST https://isitagentready.com/api/scan
Content-Type: application/json

{"url": "https://YOUR-SITE.com"}

Check that `checks.discovery.oauthDiscovery.status` is `"pass"`.