generated: '2026-07-31'
method: probed
source: https://secure.anvilogic.com/.well-known/oauth-authorization-server
docs: https://public-docs.anvilogic.com/get-started/onboarding-guide/additional-tasks
summary:
  types:
  - oauth2
  oauth2_flows:
  - authorizationCode
  pkce: true
  pkce_methods:
  - S256
  api_key_in: []
  openid_connect: false
  note: >-
    Derived from the provider's own RFC 8414 authorization-server metadata rather
    than from an OpenAPI document — Anvilogic publishes no public OpenAPI, and its
    product documentation is behind the platform login.
schemes:
- name: AnvilogicOAuth2
  type: oauth2
  source: https://secure.anvilogic.com/.well-known/oauth-authorization-server
  issuer: https://secure.anvilogic.com
  flows:
  - flow: authorizationCode
    authorizationUrl: https://secure.anvilogic.com/login/sso
    tokenUrl: https://secure.anvilogic.com/api/authentication/oauth/token
    scopes: {}
  introspection_endpoint: https://secure.anvilogic.com/api/authentication/oauth/introspect
  grant_types_supported:
  - authorization_code
  - refresh_token
  response_types_supported:
  - code
  code_challenge_methods_supported:
  - S256
  token_endpoint_auth_methods_supported:
  - none
- name: AnvilogicMCPBearer
  type: http
  scheme: bearer
  source: 'https://secure.anvilogic.com/mcp (WWW-Authenticate challenge)'
  realm: mcp
  resource_metadata: https://secure.anvilogic.com/.well-known/oauth-protected-resource
  applies_to:
  - https://secure.anvilogic.com/mcp
scopes_published: false
scopes_note: >-
  The authorization-server metadata declares no scopes_supported and no scope
  reference page is published outside the customer portal, so no scopes/ artifact
  is emitted rather than inventing one.
platform_authentication:
  sso: true
  sso_endpoint: https://secure.anvilogic.com/login/sso
  password_login: https://secure.anvilogic.com/login
  mfa: true
  mfa_source: https://trust.anvilogic.com/
  rbac: true
  admin_docs: https://public-docs.anvilogic.com/get-started/onboarding-guide/additional-tasks
x-evidence:
- fetched: '2026-07-31'
  url: https://secure.anvilogic.com/.well-known/oauth-authorization-server
  http_status: 200
  content_type: application/json
- fetched: '2026-07-31'
  url: https://secure.anvilogic.com/mcp
  http_status: 401
  www_authenticate: 'Bearer realm="mcp"'