discovery-mechanisms

Locate and validate OAuth 2.0 and OpenID Connect authorization servers via discovery protocols.

47|5|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill discovery-mechanisms
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: discovery-mechanisms
Source: https://github.com/RedHatProductSecurity/prodsec-skills/tree/main/module/skills/discovery-mechanisms
Command: npx skills add https://github.com/RedHatProductSecurity/prodsec-skills --skill discovery-mechanisms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

It addresses the need for MCP clients to reliably and securely find authorization servers via standard discovery mechanisms.

Core Features & Use Cases

  • Support for OAuth 2.0 and OpenID Connect Discovery: Validates client support for both metadata standards for server interoperability.
  • Implementation Guidance: Guides developers in fetching, parsing, and validating discovery endpoints and metadata.
  • Use Case: When configuring an MCP client, automatically retrieve authorization server info to streamline secure authentication flows.

Quick Start

Use the discovery skill to verify retrieval of server endpoints from issuer URLs and validate their contents.

Frequently Asked Questions about discovery-mechanisms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I locate authorization servers for secure MCP client authentication?

You can locate authorization servers by using standard discovery protocols to fetch and validate server endpoints from issuer URLs, ensuring secure MCP client authentication. The skill guides you in parsing this metadata for interoperability.

What is OAuth 2.0 and OpenID Connect discovery metadata validation?

OAuth 2.0 and OpenID Connect discovery metadata validation is the process of verifying that client support matches standard metadata configurations from authorization servers, ensuring secure and interoperable authentication processes across different server setups.

How do I retrieve authorization server endpoints from an issuer URL?

To retrieve authorization server endpoints from an issuer URL, use the discovery skill to fetch the standard metadata endpoints. It guides you through parsing and validating the retrieved contents to streamline secure authentication flows.

Does this discovery mechanism support both OAuth 2.0 and OpenID Connect protocols?

Yes, the discovery mechanism supports both OAuth 2.0 and OpenID Connect protocols. It validates client support for both metadata standards to ensure broad compatibility with a wide range of authorization server configurations.

How are network errors handled during authorization server discovery?

Network errors during authorization server discovery are handled robustly to ensure secure deployment. The skill includes mechanisms for robust handling of network failures and metadata validation issues during the endpoint retrieval process.

When do I need to use standard discovery protocols for MCP clients?

You need to use standard discovery protocols for MCP clients when configuring them to automatically retrieve authorization server information. This streamlines secure authentication flows by reliably locating and validating servers via standard metadata.