# FrontMCP Authentication overview API

**Canonical:** https://apis.io/apis/frontmcp-dev/auth-api/  
**Provider:** FrontMCP — https://apis.io/providers/frontmcp-dev/  
**Base URL:** https://acme.eu.auth0.com  
**Documentation:** https://frontmcp.dev/reference/auth

FrontMCP Authentication overview API is one of 4 APIs that [FrontMCP](https://apis.io/providers/frontmcp-dev/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

FrontMCP Authentication overview API as documented publicly: 11 operations. Contract generated from the documentation by API Evangelist (2026-11-08); not the provider's own document.

## Operations (11)

| Method | Path | Summary |
|---|---|---|
| GET | `/.well-known/jwks.json` | An RSA public key (JWKS) used for token verification. |
| GET | `/.well-known/oauth-authorization-server` | The authorization‑server metadata (RFC 8414). |
| GET | `/.well-known/oauth-protected-resource` | The protected‑resource metadata (RFC 9728) that 401 answers point to. |
| GET | `/api/groups` | GET /api/groups |
| GET | `/oauth/authorize` | Checks the request and answers with the sign‑in page (HTML) and a cookie. |
| GET | `/oauth/callback` | Handles the sign‑in form submission (GET works for custom pages). |
| GET | `/oauth/connect` | Connects a credential in the middle of a session (progressive auth). |
| POST | `/oauth/register` | Registered ( POST /oauth/register ) |
| POST | `/oauth/token` | Trades a code for tokens, refreshes them, or issues an anonymous token. |
| POST | `/oauth/ui/extra` | Side requests from a custom React page. |
| GET | `/oauth/userinfo` | Returns { sub, email, name } for the bearer token. |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/frontmcp-dev/openapi/_ae-authored/frontmcp-dev-auth-openapi-generated.yml
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-get-well-known-oauth-authorization-server-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-post-oauth-token-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-post-oauth-token-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-get-well-known-oauth-protected-resource-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-get-oauth-userinfo-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/frontmcp-dev/json-schema/frontmcp-dev-get-well-known-jwks-json-response-schema.json

## Other FrontMCP APIs (3)

- [FrontMCP API](https://apis.io/apis/frontmcp-dev/frontmcp-api/)
- [FrontMCP core API](https://apis.io/apis/frontmcp-dev/core-api/)
- [FrontMCP SDK overview API](https://apis.io/apis/frontmcp-dev/sdk-api/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/frontmcp-dev/auth-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/frontmcp-dev/.