generated: '2026-07-18'
method: searched
source: https://www.coteach.ai/.well-known/
standards:
- id: oauth2
  conforms: true
  evidence: RFC 8414 oauth-authorization-server document published with authorization/token/registration endpoints
- id: oidc
  conforms: true
  evidence: OpenID Connect discovery document at /.well-known/openid-configuration (issuer, endpoints, scopes)
- id: rfc8414-oauth-authorization-server-metadata
  conforms: true
  evidence: /.well-known/oauth-authorization-server returns valid RFC 8414 metadata
- id: rfc9728-oauth-protected-resource-metadata
  conforms: true
  evidence: /.well-known/oauth-protected-resource advertises the MCP resource and its authorization server
- id: rfc7591-dynamic-client-registration
  conforms: true
  evidence: registration_endpoint present (https://www.coteach.ai/api/oauth/register)
- id: pkce-rfc7636
  conforms: true
  evidence: code_challenge_methods_supported includes S256
- id: mcp
  conforms: true
  evidence: hosted Model Context Protocol server at /api/mcp ("Coteach Claude connector"), OAuth-protected
- id: llms-txt
  conforms: true
  evidence: /llms.txt published for AI-agent discovery
notes: No published compliance program (SOC 2 / ISO 27001 / etc.) was found, so no
  Compliance pointer is emitted; these are cross-cutting protocol conformance
  assertions derived from CoTeach's live .well-known and MCP surface.