myBots Identity (OAuth 2.0 / OpenID Connect)
The myBots identity provider, running OpenIddict. This is the only surface in the estate that publishes a complete, anonymous, machine-readable contract: RFC 8414 authorization-server metadata and an OpenID Connect discovery document, both live at /.well-known/. It issues the bearer tokens the tenant API requires, advertising the authorization_code, client_credentials, password and refresh_token grants plus two non-standard grants (verification_token, session_token), with PKCE S256 supported.