generated: '2026-07-19'
method: searched
source: openapi/facilio-openapi-original.yaml
standards:
- id: oauth2
  conforms: true
  evidence: OpenAPI securitySchemes declares an oauth2 scheme (authorizationCode + password flows)
- id: oidc
  conforms: true
  evidence: MCP OAuth authorization server advertises openid/email/profile scopes and OIDC discovery
- id: rfc9727-api-catalog
  conforms: true
  evidence: Publishes /.well-known/api-catalog (RFC 9727 linkset)
- id: rfc8414-oauth-metadata
  conforms: true
  evidence: mcp.facilio.com/.well-known/oauth-authorization-server (RFC 8414)
- id: mcp
  conforms: true
  evidence: Hosted MCP server (protocolVersion 2025-06-18, streamable-http) with server card
- id: rfc9457-problem-details
  conforms: false
  evidence: Uses a proprietary {success,error:{code,message}} envelope, not application/problem+json
- id: pagination
  conforms: true
  evidence: Page-based pagination (page/pageSize, max 200) with a pagination response block
- id: idempotency
  conforms: false
  evidence: No idempotency-key header documented in OpenAPI or reference
compliance:
  program_url: https://facilio.com/ai-suite/mcp/
  certifications:
  - name: SOC 2 Type II
    evidence: 'Facilio MCP page: "Meets SOC 2 Type II, ISO 27001, and GDPR standards"'
  - name: ISO 27001
    evidence: 'Facilio MCP page: "Meets SOC 2 Type II, ISO 27001, and GDPR standards"'
  - name: GDPR
    evidence: 'Facilio MCP page: "Meets SOC 2 Type II, ISO 27001, and GDPR standards"'