{"id":"ia.agent-auth-readiness","name":"Agent auth readiness","verify":{"command":"curl -sf https://{domain}/.well-known/oauth-authorization-server | jq -e '.code_challenge_methods_supported | index(\"S256\")'","rescan":"isagentready results {domain} --checkpoint ia.agent-auth-readiness","expect":"exit code 0"},"fix":{"steps":[{"action":"Add S256 to code_challenge_methods_supported in the OAuth metadata.","order":1,"language":null,"code_example":null},{"action":"List the scopes in scopes_supported.","order":2,"language":null,"code_example":null},{"action":"Explain the flow for agents in /auth.md.","order":3,"language":"markdown","code_example":"# Authentication for agents\n\nUse OAuth 2.0 authorization code with PKCE S256. Request the narrowest scope for the task."}],"summary":"Support PKCE S256, publish scopes and explain the auth flow in /auth.md.","skill":{"name":"security-trust","anchor":"ia.agent-auth-readiness"}},"category":"security","aggregate":null,"references":[{"title":"RFC 8414: OAuth 2.0 Authorization Server Metadata","kind":"spec","url":"https://datatracker.ietf.org/doc/html/rfc8414"},{"title":"RFC 9728: OAuth 2.0 Protected Resource Metadata","kind":"spec","url":"https://datatracker.ietf.org/doc/html/rfc9728"},{"title":"RFC 7636: PKCE","kind":"spec","url":"https://datatracker.ietf.org/doc/html/rfc7636"}],"stage":"act","lifecycle":{"introduced":"2026-08-24","revised":[],"retired":null,"replaced_by":null},"methodology_version":"2026-10-22","evidence_tier":"standard","evidence_source":{"title":"agentready.org AR-ACT-01","url":"https://www.agentready.org/#act"},"why":"Agents need more than a login page. They need discoverable auth metadata, scoped permissions, PKCE support, and a concise walkthrough that explains how to obtain and use credentials safely.","profiles":["api_tool_readiness","agentic_commerce"],"score_role":"core","legacy_id":"5.14","i18n":{"nl":{"name":"Auth-gereedheid voor agents","steps":["Voeg S256 toe aan code_challenge_methods_supported in de OAuth-metadata.","Zet de scopes in scopes_supported.","Leg de flow voor agents uit in /auth.md."],"why":"Agents hebben meer nodig dan een loginpagina. Ze hebben vindbare auth-metadata, beperkte scopes, PKCE en een korte uitleg nodig om veilig credentials te krijgen en te gebruiken.","fix_summary":"Ondersteun PKCE S256, publiceer scopes en leg de authflow uit in /auth.md.","verify_expect":"exitcode 0"}},"ar_practice_ids":["AR-ACT-01"],"strength":"SHOULD","ar_mapping":"full","evidence_type":"scanner_data","detail_url":"https://isagentready.com/en/methodology/checkpoints/ia.agent-auth-readiness","maturity":"recommended","applicability":{"mode":"detected_surface","condition":null,"surfaces":["auth"]}}