generated: '2026-07-19'
method: searched
source: https://api.glue.ai/.well-known/oauth-authorization-server
standards:
  - id: oauth2
    conforms: true
    evidence: OAuth2 client-credentials (GraphQL) and authorization-code (MCP) flows documented
  - id: rfc8414-oauth-authorization-server-metadata
    conforms: true
    evidence: https://api.glue.ai/.well-known/oauth-authorization-server returns 200
  - id: rfc9728-oauth-protected-resource-metadata
    conforms: true
    evidence: https://api.glue.ai/.well-known/oauth-protected-resource returns 200
  - id: rfc7591-dynamic-client-registration
    conforms: true
    evidence: registration_endpoint https://api.glue.ai/oauth/register advertised
  - id: pkce-rfc7636
    conforms: true
    evidence: code_challenge_methods_supported = [S256]
  - id: mcp-model-context-protocol
    conforms: true
    evidence: hosted MCP server at https://mcp.glue.ai/mcp with mcp:read/mcp:write scopes
  - id: graphql
    conforms: true
    evidence: public GraphQL endpoint https://api.gluegroups.com/public/graphql (Relay cursor connections)
  - id: soc2
    conforms: true
    evidence: SOC 2 compliance stated at https://glue.ai/company/security
  - id: rfc9457-problem-details
    conforms: false
    evidence: GraphQL errors[] envelope, not application/problem+json
  - id: rfc9116-security-txt
    conforms: false
    evidence: /.well-known/security.txt returns 404
compliance:
  soc2: true
  page: https://glue.ai/company/security