# Feature AI-14 - Implement RFC 8414: OAuth 2.0 Authorization Server Metadata

Project: Stream AI
Status: closed
URL: https://community.openproject.org/work_packages/AI-14

## Planning

| Attribute | Value |
| --- | --- |
| Date | 2025-11-14 – 2026-03-31 |
| Priority | Medium |
| Target versions | Product Backlog |
| List |  |
| Roadmap |  |
| Relevance |  |

## OPEN POINTS / FEEDBACK

_No work packages_

## Features and Chunks

_No work packages_

## Bugs and other work packages

_No work packages_

## Technical Details

| Attribute | Value |
| --- | --- |
| Module | Authentication / OAuth |
| Feature Flag |  |
| Requires doc change | No |
| Enterprise plan | Community (COM) |

## Details

| Attribute | Value |
| --- | --- |
| Pull preview |  |
| Mockups |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers | Jan Sandbrink |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Estimates and progress

| Attribute | Value |
| --- | --- |
| Work |  |
| Labor costs |  |

## Description

**As** an MCP client,  
**I require to** have access to metadata of the OAuth authorization server built into OpenProject,  
**so that** I know where and how to obtain access tokens from it.

**Acceptance criteria**

*   Authorization server metadata is exposed at a well-known location [according to RFC 8414](https://datatracker.ietf.org/doc/html/rfc8414)
    
    *   including all REQUIRED metadata attribtues
        
    *   including the optional attibutes:
        
        *   `scopes_supported`
            
        *   `grant_types_supported`
            
        *   `service_documentation` (pointing to a suitable page of our documentation about OAuth application creation)
            

**Technical notes**

*   We should check whether this can be implemented upstream in Doorkeeper
    
    *   (or whether it is already implemented)
        

**Permissions and visibility considerations**

*   To everyone, even/especially unauthenticated clients