generated: '2026-10-18'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://docs.karada.ai/guides/oauth-backend-auth.md
sources:
- https://docs.karada.ai/guides/oauth-backend-auth.md
- https://docs.karada.ai/quickstart.md
description: Authentication methods published for Karada AI
schemes:
- type: oauth2
  name: Karada Managed OAuth 2.1
  evidence: Karada provides an end-to-end Managed OAuth 2.1 Provider & JWKS Identity Relay Engine.
  flows:
  - authorization_code
  authorize_url: https://api.karada.ai/api/v1/oauth/authorize
  how_to_obtain: User authenticates via a browser popup; the provider returns an authorization code which is exchanged for an RS256 JWT access
    token at the token endpoint.
- type: http-bearer
  name: Bearer JWT
  evidence: 'The MCP server sends requests with `Authorization: Bearer <token>`.'
  location: header
  header: Authorization
  how_to_obtain: Access token is obtained from the Karada OAuth 2.1 token endpoint after completing the authorization_code flow.
docs: https://docs.karada.ai/guides/oauth-backend-auth.md