generated: '2026-07-20'
method: searched
source: https://api.mudflapinc.com/.well-known/oauth-authorization-server
standards:
- id: oauth2
  conforms: true
  evidence: >-
    RFC 8414 authorization-server metadata declares authorization_code and
    password grants with authorize/token/revocation endpoints.
- id: oidc
  conforms: true
  evidence: >-
    scopes_supported includes openid; id_token_signing_alg_values_supported RS256;
    claims_supported sub/email/name/preferred_username.
- id: rfc8414-as-metadata
  conforms: true
  evidence: /.well-known/oauth-authorization-server returns 200 with a valid metadata document.
- id: rfc9457-problem-details
  conforms: false
  evidence: No public API reference or error surface published.
notes: >-
  Standards asserted purely from the public OAuth authorization-server metadata.
  No published compliance program (SOC 2 / ISO 27001 / PCI) was found on the
  site, so no Compliance pointer is emitted.