HERE

HERE Authorization Server Metadata API

The Authorization Server Metadata API from HERE — 2 operation(s) for authorization server metadata.

GitHub OpenAPI

Operations 2

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /.well-known/oauth-authorization-server Get OAuth authorization server metadata · Get OAuth Authorization Server Metadata #
Ask an LLM
“Where is the HERE OAuth token endpoint and which grant types does it support?”
“Can my client discover the authorization server settings automatically per RFC 8414?”
Tell an agent
Fetch the OAuth 2.0 authorization server metadata.
Discover the token endpoint from the standard well-known OAuth document.
GET /.well-known/oauth-authorization-server/mcp Get OAuth server metadata for MCP clients · Get MCP OAuth Authorization Server Metadata #
Ask an LLM
“What authorization server metadata should an MCP client use to sign in?”
“Is there a separate OAuth discovery document for MCP connections?”
Tell an agent
Fetch the MCP-specific OAuth authorization server metadata.
Get the OAuth discovery document for connecting an MCP client.

Documentation

📖
Documentation
https://docs.here.com/identity-and-access-management/docs
📖
APIReference
https://docs.here.com/identity-and-access-management/reference
📖
Documentation
https://docs.here.com/data-api/docs
📖
APIReference
https://docs.here.com/data-api/reference
📖
Documentation
https://docs.here.com/usage/docs
📖
APIReference
https://docs.here.com/usage/reference
📖
Documentation
https://docs.here.com/destination-weather/docs
📖
APIReference
https://docs.here.com/destination-weather/reference
📖
Documentation
https://docs.here.com/ev-products/docs
📖
APIReference
https://docs.here.com/ev-products/reference
📖
Documentation
https://docs.here.com/fuel-prices/docs
📖
APIReference
https://docs.here.com/fuel-prices/reference
📖
Documentation
https://docs.here.com/geocoding-and-search/docs
📖
APIReference
https://docs.here.com/geocoding-and-search/reference
📖
Documentation
https://docs.here.com/routing/docs
📖
APIReference
https://docs.here.com/routing/reference
📖
Documentation
https://docs.here.com/positioning/docs
📖
APIReference
https://docs.here.com/positioning/reference
📖
Documentation
https://docs.here.com/indoor-map/docs
📖
APIReference
https://docs.here.com/indoor-map/reference
📖
Documentation
https://docs.here.com/transit/docs
📖
APIReference
https://docs.here.com/transit/reference
📖
Documentation
https://docs.here.com/map-attributes/docs
📖
APIReference
https://docs.here.com/map-attributes/reference
📖
Documentation
https://docs.here.com/map-rendering/docs
📖
APIReference
https://docs.here.com/map-rendering/reference
📖
Documentation
https://docs.here.com/workspace/docs
📖
APIReference
https://docs.here.com/workspace/reference
📖
Documentation
https://docs.here.com/tour-planning/docs
📖
APIReference
https://docs.here.com/tour-planning/reference
📖
Documentation
https://docs.here.com/tracking/docs
📖
APIReference
https://docs.here.com/tracking/reference
📖
Documentation
https://docs.here.com/traffic-api/docs
📖
APIReference
https://docs.here.com/traffic-api/reference
📖
Documentation
https://docs.here.com/wego-pro/docs
📖
APIReference
https://docs.here.com/wego-pro/reference

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-authorization-server-metadata-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/here:here-authorization-server-metadata-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

here-authorization-server-metadata-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: OAuth 2.0 Access Token Authorization Server Metadata API
  version: 1.2.0
  description: 'Request an OAuth 2.0 access token that identifies your identity

    The term "realm" is now known as "organization" or "org".'
servers:
- url: https://account.api.here.com
tags:
- name: Authorization Server Metadata
paths:
  /.well-known/oauth-authorization-server:
    get:
      tags:
      - Authorization Server Metadata
      summary: Get OAuth Authorization Server Metadata
      operationId: OAuth2.0AccessTokenGetAuthServerMetadata
      description: Returns OAuth 2.0 Authorization Server Metadata according to https://datatracker.ietf.org/doc/html/rfc8414#section-3.1
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuthServerMetadata'
      x-operation-id-source: normalized
      x-operation-id-original: OAuth 2.0 Access Token getAuthServerMetadata
  /.well-known/oauth-authorization-server/mcp:
    get:
      tags:
      - Authorization Server Metadata
      summary: Get MCP OAuth Authorization Server Metadata
      operationId: OAuth2.0AccessTokenGetMcpAuthServerMetadata
      security: []
      description: Returns OAuth 2.0 Authorization Server Metadata according to https://datatracker.ietf.org/doc/html/rfc8414#section-3.1
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MCPAuthServerMetadata'
      x-operation-id-source: normalized
      x-operation-id-original: OAuth 2.0 Access Token getMcpAuthServerMetadata
components:
  schemas:
    AuthServerMetadata:
      type: object
      properties:
        issuer:
          type: string
          format: uri
          description: The authorization server's issuer identifier.
          example: https://account.api.here.com
        token_endpoint:
          type: string
          format: uri
          description: URL of authorization servers’s token endpoint
          example: https://account.api.here.com/oauth2/token
        token_endpoint_auth_methods_supported:
          type: array
          items:
            type: string
            enum:
            - private_key_jwt
          description: JSON array containing a list of client authentication methods supported by this token endpoint.
          example:
          - private_key_jwt
        token_endpoint_auth_signing_alg_values_supported:
          type: array
          items:
            type: string
            enum:
            - RS256
          description: JSON array containing a list of the JWS signing algorithms ("alg" values) supported by the token endpoint for the signature on the JWT
          example:
          - RS256
        grant_types_supported:
          type: array
          items:
            type: string
            enum:
            - client_credentials
            - jwtIssNotHERE
            - urn:ietf:params:oauth:grant-type:token-exchange
          description: JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports.
          example:
          - client_credentials
        response_types_supported:
          type: array
          items:
            type: string
            enum:
            - token
          description: JSON array containing a list of the OAuth 2.0 response_type values. Supported values 'token'
          example:
          - token
    MCPAuthServerMetadata:
      type: object
      properties:
        issuer:
          type: string
          format: uri
          description: The authorization server's MCP issuer identifier.
          example: https://account.here.com
        authorization_endpoint:
          type: string
          format: uri
          description: URL of authorization servers’s MCP authorization endpoint
          example: https://account.here.com/mcp/authorize
        token_endpoint:
          type: string
          format: uri
          description: URL of authorization servers’s token endpoint
          example: https://account.here.com/token
        registration_endpoint:
          type: string
          format: uri
          description: URL of authorization servers’s MCP client registration endpoint
          example: https://account.api.here.com/mcp/register
        token_endpoint_auth_methods_supported:
          type: array
          items:
            type: string
            enum:
            - none
          description: JSON array containing a list of client authentication methods supported by this token endpoint.
          example:
          - none
        grant_types_supported:
          type: array
          items:
            type: string
            enum:
            - authorization_code
          description: JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports.
          example:
          - authorization_code
        response_types_supported:
          type: array
          items:
            type: string
            enum:
            - code
          description: JSON array containing a list of the OAuth 2.0 response_type values. Supported values 'code'
          example:
          - code
        jwks_uri:
          type: string
          format: uri
          description: URL of the authorization server's JSON Web Key Set document.
          example: https://account.here.com/openid/jwk
        code_challenge_methods_supported:
          type: array
          items:
            type: string
          description: PKCE code challenge methods supported by the server. Only SHA-256 (S256) is supported.
          example:
          - S256
  securitySchemes:
    OAuth:
      type: apiKey
      in: header
      name: Authorization
      description: 'OAuth [OAuth 1.0 Signing Process](http://oauth.net/core/1.0/#signing_process). Used for client_credentials grant when NOT using JWT assertion authentication.

        '
    Bearer:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: 'A token obtained from one of the supported OAuth 2.0 authorization flows.

        For more information on how to get a bearer token, see the

        [https://developer.here.com/documentation/identity-access-management/dev_guide/index.html](Identity & Access Management Guide).

        '
externalDocs:
  description: The developer guide and related API references are available here.
  url: https://www.here.com/docs/category/identity-and-access-management