> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-muhammad-kumail-github-mcp-tab.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Discover Oidc Endpoints

> DiscoverOIDCEndpoints fetches the OpenID Connect discovery document for an issuer
 and returns the authorization, token, and supported scopes.



## OpenAPI

````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples post /api/v1/mcp_servers/discover_oidc
openapi: 3.1.0
info:
  description: The C1 API is a HTTP API for managing C1 resources.
  title: C1 API
  version: 0.1.0-alpha
servers:
  - description: The C1 API server for the current tenant.
    url: https://{tenantDomain}.conductor.one
    variables:
      tenantDomain:
        default: example
        description: The domain of the tenant to use for this request.
security:
  - bearerAuth: []
    oauth: []
paths:
  /api/v1/mcp_servers/discover_oidc:
    post:
      tags:
        - MCP Servers
      summary: Discover Oidc Endpoints
      description: >-
        DiscoverOIDCEndpoints fetches the OpenID Connect discovery document for
        an issuer
         and returns the authorization, token, and supported scopes.
      operationId: c1.api.ai_governance.v1.MCPServerService.DiscoverOIDCEndpoints
      requestBody:
        content:
          application/json:
            schema:
              $ref: >-
                #/components/schemas/c1.api.ai_governance.v1.MCPServerServiceDiscoverOIDCEndpointsRequest
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/c1.api.ai_governance.v1.MCPServerServiceDiscoverOIDCEndpointsResponse
          description: >-
            MCPServerServiceDiscoverOIDCEndpointsResponse returns the discovered
            OAuth2 endpoints.
      x-codeSamples:
        - lang: go
          label: DiscoverOIDCEndpoints
          source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n    ctx := context.Background()\n\n    s := conductoronesdkgo.New(\n        conductoronesdkgo.WithSecurity(shared.Security{\n            BearerAuth: \"<YOUR_BEARER_TOKEN_HERE>\",\n            Oauth: \"<YOUR_OAUTH_HERE>\",\n        }),\n    )\n\n    res, err := s.MCPServer.DiscoverOIDCEndpoints(ctx, nil)\n    if err != nil {\n        log.Fatal(err)\n    }\n    if res.MCPServerServiceDiscoverOIDCEndpointsResponse != nil {\n        // handle response\n    }\n}"
components:
  schemas:
    c1.api.ai_governance.v1.MCPServerServiceDiscoverOIDCEndpointsRequest:
      description: >-
        MCPServerServiceDiscoverOIDCEndpointsRequest fetches the OpenID Connect
        discovery
         document for a given issuer URL.
      properties:
        issuerUrl:
          description: >-
            The issuer URL (e.g. "https://accounts.google.com"). The server
            appends
             /.well-known/openid-configuration to this URL.
          type: string
      title: Mcp Server Service Discover Oidc Endpoints Request
      type: object
      x-speakeasy-name-override: MCPServerServiceDiscoverOIDCEndpointsRequest
    c1.api.ai_governance.v1.MCPServerServiceDiscoverOIDCEndpointsResponse:
      description: >-
        MCPServerServiceDiscoverOIDCEndpointsResponse returns the discovered
        OAuth2 endpoints.
      properties:
        authorizationEndpoint:
          description: The authorization endpoint URL.
          type: string
        codeChallengeMethodsSupported:
          description: >-
            PKCE code challenge methods supported by the authorization server
            (RFC 8414).
             Typical values: "plain", "S256". Empty when the discovery doc omits this
             field. The frontend should pass the array back unchanged on save so the
             backend can persist it on the connector and skip per-flow re-discovery.
          items:
            type: string
          type:
            - array
            - 'null'
        scopesSupported:
          description: Scopes supported by the authorization server.
          items:
            type: string
          type:
            - array
            - 'null'
        tokenEndpoint:
          description: The token endpoint URL.
          type: string
      title: Mcp Server Service Discover Oidc Endpoints Response
      type: object
      x-speakeasy-name-override: MCPServerServiceDiscoverOIDCEndpointsResponse
  securitySchemes:
    bearerAuth:
      scheme: bearer
      type: http
    oauth:
      description: >-
        This API uses OAuth2 with the Client Credential flow.

        Client Credentials must be sent in the BODY, not the headers.

        For an example of how to implement this, refer to the
        [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187)
        function.
      flows:
        clientCredentials:
          scopes: {}
          tokenUrl: /auth/v1/token
      type: oauth2

````