wellknownscan
by IntegrAuth

Map your identity .well-known discovery surface

Fetch and grade a domain's OAuth / OIDC / MCP identity discovery cluster — openid-configuration, oauth-authorization-server, oauth-protected-resource, and its jwks_uri — against OIDC Discovery 1.0, RFC 8414, and RFC 9728. Every finding cited; each surface links to the deep grader that covers its security posture.

We fetch only public /.well-known/ discovery documents and the advertised jwks_uri, over HTTPS. Nothing is stored unless a report is created.

Load an example:

wellknownscan

Map & grade your identity .well-known discovery surface

by IntegrAuth