{
  "issuer": "https://www.mnemom.ai",
  "authorization_endpoint": "https://vaqzyscwdtguoaksyglp.supabase.co/auth/v1/oauth/authorize",
  "token_endpoint": "https://vaqzyscwdtguoaksyglp.supabase.co/auth/v1/oauth/token",
  "jwks_uri": "https://vaqzyscwdtguoaksyglp.supabase.co/auth/v1/.well-known/jwks.json",
  "userinfo_endpoint": "https://vaqzyscwdtguoaksyglp.supabase.co/auth/v1/oauth/userinfo",
  "scopes_supported": ["openid", "profile", "email", "phone"],
  "response_types_supported": ["code"],
  "response_modes_supported": ["query"],
  "grant_types_supported": ["authorization_code", "refresh_token"],
  "token_endpoint_auth_methods_supported": ["client_secret_basic", "client_secret_post", "none"],
  "code_challenge_methods_supported": ["S256", "plain"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256", "HS256", "ES256"],
  "agent_auth": {
    "skill": "https://www.mnemom.ai/auth.md",
    "register_uri": "https://api.mnemom.ai/v1/agents",
    "claim_uri": "https://api.mnemom.ai/v1/agents/{agent_id}/claim",
    "rekey_uri": "https://api.mnemom.ai/v1/agents/{agent_id}/rekey",
    "revocation_uri": "https://api.mnemom.ai/v1/agents/{agent_id}",
    "documentation_uri": "https://docs.mnemom.ai/for-agents",
    "identity_types_supported": ["anonymous"],
    "anonymous": {
      "credential_types_supported": ["api_key", "bearer_jwt", "x-mnemom-agent-proof"],
      "claim_uri": "https://api.mnemom.ai/v1/agents/{agent_id}/claim"
    },
    "registration_methods": [
      {
        "method": "mnemom_agent_registration",
        "register_uri": "https://api.mnemom.ai/v1/agents",
        "request_credentials": ["bearer_jwt", "api_key"],
        "request_body_schema": {
          "name": "string (2-32 chars, [A-Za-z0-9-], start/end alphanumeric)",
          "hash_proof": "string (sha256 hex of `${apiKey}|${agentName}`)",
          "card_json": "object (optional, AAP Alignment Card)",
          "policy_yaml": "string (optional, Protection Card policy)",
          "org_id": "string (optional; defaults to caller's primary org)"
        },
        "issued_credential": {
          "type": "x-mnemom-agent-proof",
          "header": "X-Mnemom-Agent-Proof",
          "format": "64-hex sha256 possession proof"
        }
      }
    ],
    "events_supported": ["agent_registered", "agent_claimed", "agent_rekeyed", "agent_revoked"]
  }
}
