generated: '2026-07-18'
method: searched
source: https://app.brevian.ai/.well-known/oauth-authorization-server
summary: >-
  Cross-cutting semantics for Brevian's machine surface (the hosted MCP server).
  Brevian publishes no public REST API reference, so the conventions captured
  here are limited to what the OAuth/OIDC discovery documents and MCP contract
  make observable.
authentication:
  style: oauth2
  detail: >-
    OAuth 2.1 authorization-code + PKCE (S256), RFC 7591 dynamic client
    registration, RFC 7009 revocation. See authentication/brevian-authentication.yml.
transport:
  protocol: Model Context Protocol (MCP) over HTTP
  endpoint: https://app.brevian.ai/mcp
idempotency:
  supported: unknown
  detail: No idempotency-key header or contract is documented for Brevian.
pagination:
  supported: unknown
  detail: Not documented (no public REST API reference).
versioning:
  scheme: weekly-dated product release notes (Product Pulse)
  detail: See changelog/brevian-changelog.yml. No API version identifier is published.
error_envelope:
  detail: >-
    MCP JSON-RPC error objects observed (e.g. {"error":"invalid_token",
    "error_description":"Authentication required"} on unauthenticated calls).
cross_links:
  authentication: authentication/brevian-authentication.yml
  scopes: scopes/brevian-scopes.yml
  changelog: changelog/brevian-changelog.yml
  mcp: mcp/brevian-mcp.yml