{
  "$comment": "OAuth 2.0 Authorization Server Metadata (RFC 8414) for the Razorpay MCP server. These endpoints are MCP protocol endpoints — they are not browser-navigable. For setup instructions see service_documentation. The Razorpay REST API (api.razorpay.com) uses HTTP Basic Auth with API keys, not OAuth.",
  "issuer": "https://mcp.razorpay.com",
  "authorization_endpoint": "https://mcp.razorpay.com/authorize",
  "token_endpoint": "https://mcp.razorpay.com/token",
  "registration_endpoint": "https://mcp.razorpay.com/register",
  "response_types_supported": ["code"],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token"
  ],
  "scopes_supported": ["read_only"],
  "token_endpoint_auth_methods_supported": ["client_secret_post"],
  "code_challenge_methods_supported": ["S256"],
  "service_documentation": "https://razorpay.com/docs/build/llm-docs/mcp-server/oauth.md",
  "agent_auth": {
    "skill": "https://razorpay.com/auth.md",
    "register_uri": "https://dashboard.razorpay.com/app/website-app-settings/business-website-details",
    "supported_identity_types": ["verified_email"],
    "credential_types": ["api_key"],
    "claim_uri": "https://dashboard.razorpay.com/app/website-app-settings/business-website-details",
    "notes": "Live API keys require human 2FA on the Dashboard. Agents cannot self-provision live credentials."
  },
  "x-api-key-auth": {
    "description": "Primary authentication for the Razorpay REST API: HTTP Basic Auth using key_id as username and key_secret as password. API keys are generated from the Razorpay Dashboard.",
    "key_management_url": "https://dashboard.razorpay.com/app/website-app-settings/business-website-details",
    "docs": "https://razorpay.com/agents.md"
  }
}