Authorization server · Discovery
Metadata issuer matches the discovery URL
The issuer value inside the metadata document equals the issuer identifier used to construct the well-known URL, so clients can detect a substituted document.
mcp.as.issuer-match
In revision 2026-07-28
- Level
- MUST
- Defined in
- Authorization Server Discovery › Authorization Server Metadata DiscoveryMCP Authorization 2026-07-28
- Party
- Authorization server
- Observable
passiveObservable by reading published metadata, without any request to the server.
Level by revision
| Revision | Level | Section |
|---|---|---|
| 2026-07-28current | MUST | Authorization Server Discovery › Authorization Server Metadata Discovery |
| 2025-11-25 | MUST | Authorization Server Discovery › Authorization Server Metadata Discovery |
Adoption across listed servers
- Supported0
- Partial0
- Unsupported0
- Unknown34
- Not applicable5