oauth.net
OAuth Client ID Metadata Document
datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document
The Client ID Metadata Document extension defines a mechanism for an OAuth client to host its metadata at a URL to be able to work with authorization servers without prior registration.
Implementations
Authorization Servers
- Aembit
- Auth0
- AuthHero
- Authlete
- Authplane
- Backstage
- Bifrost
- Casdoor
- Clerk
- Curity
- Descope
- FusionAuth
- Gravitee
- Janssen
- Keycloak
- LibreGraph Connect
- Logto
- Nhost
- Obot
- Okta
- Oracle
- PingFederate
- PingOne Advanced Identity Cloud
- Pocket ID
- Pomerium
- Rauthy
- Scalekit
- ServiceNow
- Speakeasy
- Stalwart
- Strata
- Stytch
- ToolHive
- WorkOS
- WSO2 Asgardeo
Services
APIs and MCP servers that accept clients identified by a Client ID Metadata Document.
- Bluesky / atproto
- Braze
- Bubble
- Canva
- Fastmail
- Grafana Cloud
- Hugging Face
- Loops
- Lucid
- Mollie
- Neon
- Notion
- PostHog
- Resend
- Sumo Logic
- Todoist
- Typeform
- Vercel
These services advertise client_id_metadata_document_supported in their authorization server metadata. Each link goes to the metadata document.
- Adjust
- Airtable
- Amplitude
- Any.do
- Apaleo
- Apify
- Apollo.io
- Appwrite Cloud
- Atlassian
- Axiom
- Back4App
- BambooHR
- Base44
- Basecamp
- Baserow
- Bonfire
- BugHerd
- Cal.com
- Canny
- Checkout.com
- Circleback
- Cleanvoice
- Cloudflare
- Context7
- CookieYes
- Cortex
- Crunchbase
- DatoCMS
- Deliverect
- Descript
- Devin
- Dodo Payments
- ElevenLabs
- Exa
- Expo
- Extend
- fal.ai
- Fireflies.ai
- getimg.ai
- Glasp
- Granola
- Have I Been Pwned
- HEY
- HeyGen
- Honeycomb
- Icons8
- idealo
- ImageKit
- incident.io
- Indeed
- InVideo
- JumpCloud
- Jumpseller
- Klaviyo
- LaunchDarkly
- Leonardo.ai
- Linear
- Listen Notes
- Locize
- LogRocket
- LottieFiles
- Lovable
- micro.blog
- Midjourney
- Momentic
- monday.com
- MongoDB
- MURAL
- Nansen
- Needle
- OneUptime
- OpenAlex
- orq.ai
- PacketStream
- Paddle
- Peakflo
- Phrase
- Plain
- Port
- Pydantic Logfire
- Pylon
- Quartr
- Railway
- Recurly
- Remote.com
- Roam Research
- SearchApi
- Semgrep
- Sentry
- ShipStation
- Shopify
- Shortcut
- Softr
- Statsig
- Supermetrics
- SurveyMonkey
- Synapse
- Synthesia
- Tailwind
- Tapcart
- Tavily
- Tenderly
- tl;dv
- Transloadit
- TRMNL
- Twelve Data
- Twist
- Typefully
- Upwork
- Userpilot
- VirusTotal
- Windsor.ai
- Wise
- Zenable
MCP Clients
The ↗ links go to each client's metadata document.
- Amp (↗)
- ChatGPT (↗)
- Claude (↗)
- Claude Code (↗)
- Codex (↗)
- Cursor (↗)
- Dust (↗)
- GitHub Copilot CLI (↗)
- Google Antigravity (↗)
- goose (↗)
- Grok (↗)
- HuggingChat (↗)
- Kilo Code (↗)
- Kiro (↗)
- LobeHub (↗)
- Mastra Code (↗)
- MCPJam (↗)
- Notion (↗)
- Onyx (↗)
- opencode (↗)
- Postman (↗)
- Replit (↗)
- ToolHive (↗)
- VS Code (↗)
- Zed (↗)
Other Clients
- indiebookclub (↗)
- IndieLogin (↗)
- Micro.blog (↗)
- Webmention.io (↗)
MCP SDKs
Libraries and Frameworks
- @atcute/oauth-browser-client
- @atcute/oauth-node-client
- @atproto/oauth-client-browser
- @atproto/oauth-client-expo
- @atproto/oauth-client-node
- @atproto/oauth-provider
- Attesto
- Better Auth
- Cbox ID
- Cloudflare Agents SDK
- Cloudflare workers-oauth-provider
- Dignite ABP OpenIddict module
- django-allauth
- django-oauth-toolkit
- ex_mcp
- FastMCP
- FastMCP (TypeScript)
- FrontMCP
- go-auth-x
- idunno.Bluesky
- IndieAuth for WordPress
- Indiekit
- indigo (Go atproto)
- Laravel MCP
- Mastra
- mcp-remote
- mcp-use
- node-oidc-provider
- Sesame
- Spring AI mcp-security
Testing Tools
- client.dev
- example-app.com/client
- Local Authorization Server for Testing
- CIMD Reader
- MCP Conformance Suite
- MCP Inspector
- MCPJam OAuth Debugger
- FastMCP CLI
- CIMD Service
- CerberAuth CIMD templates
- mcp-debug
- mcpc
More resources
- From Self-Asserted to Domain-Backed: Why CIMD Beats DCR (Jul 2026, aaronparecki.com)
- Identerati Office Hours - Episode 149.5: OAuth Client ID Metadata Document (Oct 2025, youtube.com)
- What is a Client ID Metadata Document (CIMD)? (Oct 2025, descope.com)
- Evolving OAuth Client Registration in the Model Context Protocol (Aug 2025, modelcontextprotocol.io)
- OAuth for the Open Web (Jul 2018, aaronparecki.com)