generated: '2026-09-19'
method: probed
source: https://mcp.luminarylane.app/.well-known/oauth-authorization-server
docs: https://github.com/luminarylane/lane-plugin
corroborating_source: https://mcp.luminarylane.app/.well-known/oauth-protected-resource/mcp
scope_count: 0
summary: >-
  Luminary Lane publishes no OpenAPI (derive-oauth-scopes.py reports 0 oauth2 providers for this repo),
  so this file records what the live RFC 8414 / RFC 9728 discovery documents on the MCP host declare.
  Neither document carries scopes_supported, the provider documents no scope or permission vocabulary
  anywhere public, and the alternative X-API-Key credential is a per-user key with no scoping surface.
  An OAuth client therefore requests a token with no scope parameter and receives whatever the signed-in
  user's workspace access allows. The absence is the measurement; no scope names were invented.
model: >-
  Unscoped OAuth 2.1 authorization-code + PKCE against a first-party authorization server co-hosted with
  the MCP resource. Authorization is workspace/brand-membership based, not scope based.
authorization_server:
  issuer: https://mcp.luminarylane.app/
  vendor: first-party (Express)
  metadata_url: https://mcp.luminarylane.app/.well-known/oauth-authorization-server
  http_status: 200
  authorization_endpoint: https://mcp.luminarylane.app/authorize
  token_endpoint: https://mcp.luminarylane.app/token
  revocation_endpoint: https://mcp.luminarylane.app/revoke
  registration_endpoint: https://mcp.luminarylane.app/register
  grant_types_supported:
    - authorization_code
    - refresh_token
  response_types_supported:
    - code
  code_challenge_methods_supported:
    - S256
  token_endpoint_auth_methods_supported:
    - client_secret_post
    - none
  revocation_endpoint_auth_methods_supported:
    - client_secret_post
  scopes_supported: null
  jwks_uri: null
protected_resource:
  metadata_url: https://mcp.luminarylane.app/.well-known/oauth-protected-resource/mcp
  http_status: 200
  resource: https://mcp.luminarylane.app/mcp
  resource_name: Luminary Lane MCP Server
  authorization_servers:
    - https://mcp.luminarylane.app/
  scopes_supported: null
  bearer_methods_supported: null
scopes: []