generated: '2026-07-20'
method: derived
source: openapi/mithril-compute-openapi-original.json + docs.mithril.ai security & login discovery
standards:
- id: oauth2
  conforms: true
  evidence: login.mithril.ai publishes RFC 8414 oauth-authorization-server metadata
    (authorization_code, client_credentials, refresh_token, device_code grants).
- id: oidc
  conforms: true
  evidence: login.mithril.ai/.well-known/openid-configuration present (RS256 id tokens,
    openid/profile/email scopes).
- id: rfc9457-problem-details
  conforms: false
  evidence: API errors do not use application/problem+json; validation errors use
    FastAPI HTTPValidationError (422) shape.
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II certified (availability, security, confidentiality) per
    docs.mithril.ai security page and trust.mlfoundry.com.
- id: iso27001
  conforms: partial
  evidence: Underlying datacenters maintain SOC 2 Type II or ISO 27001; Mithril itself
    asserts SOC 2 Type II.
- id: gdpr
  conforms: true
  evidence: Publishes a Data Processing Agreement and Privacy Policy.
- id: bearer-token-auth
  conforms: true
  evidence: RFC 6750 bearer token (Authorization header) with fkey_ prefixed keys.
- id: pagination
  conforms: true
  evidence: List endpoints (bids, reservations, instances, pricing history) expose
    cursor/limit-style query parameters.