# MCP OAuth metadata

Check id `mcp-oauth-metadata` · Connectability · runs in the free CLI · pre-release, in calibration

**What we look for.** Whether your authorization server publishes its metadata (RFC 8414) with the endpoints a host needs.

**Why it matters.** The host reads it to find the authorization, token and registration endpoints. Missing or wrong, sign-in stops here.

**How to pass.** Serve /.well-known/oauth-authorization-server with issuer, authorization_endpoint, token_endpoint and registration_endpoint.

Run it: `npx backwatch your-site.com --pillar connectability` and find `mcp-oauth-metadata` in the report.