{
  "issuer": "https://haveibeenpwned.com/",
  "authorization_endpoint": "https://haveibeenpwned.com/connect/authorize",
  "token_endpoint": "https://haveibeenpwned.com/connect/token",
  "jwks_uri": "https://haveibeenpwned.com/.well-known/jwks",
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query",
    "form_post",
    "fragment"
  ],
  "scopes_supported": [
    "openid",
    "offline_access",
    "hibp.mcp"
  ],
  "claims_supported": [
    "aud",
    "exp",
    "iat",
    "iss",
    "sub"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "subject_types_supported": [
    "public"
  ],
  "prompt_values_supported": [
    "consent",
    "login",
    "none",
    "select_account"
  ],
  "token_endpoint_auth_methods_supported": [
    "none",
    "private_key_jwt"
  ],
  "require_pushed_authorization_requests": false,
  "tls_client_certificate_bound_access_tokens": false,
  "client_id_metadata_document_supported": true,
  "registration_endpoint": "https://haveibeenpwned.com/connect/register",
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256",
    "ES256"
  ],
  "resource": "https://haveibeenpwned.com/mcp",
  "authorization_servers": [
    "https://haveibeenpwned.com/"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "agent_auth": {
    "skill": "https://haveibeenpwned.com/auth.md",
    "register_uri": "https://haveibeenpwned.com/connect/register",
    "identity_types_supported": [
      "interactive_session"
    ],
    "interactive_session": {
      "credential_types_supported": [
        "access_token"
      ],
      "grant_types_supported": [
        "authorization_code",
        "refresh_token"
      ],
      "response_types_supported": [
        "code"
      ],
      "token_endpoint_auth_methods_supported": [
        "none",
        "private_key_jwt"
      ],
      "token_endpoint_auth_signing_alg_values_supported": [
        "RS256",
        "ES256"
      ],
      "code_challenge_methods_supported": [
        "S256"
      ],
      "scopes_supported": [
        "openid",
        "offline_access",
        "hibp.mcp"
      ]
    }
  },
  "claims_parameter_supported": false,
  "request_parameter_supported": false,
  "request_uri_parameter_supported": false,
  "authorization_response_iss_parameter_supported": true
}