Network as Code Authorization Server
The platform's OAuth2 / OpenID Connect surface, tagged "NaC Authorization Server" and "Well Known Metadata" in the harvested specification. Real operations are GET /oauth2/v1/auth/clientcredentials (issue or return the caller's client credentials), GET /oauth2/v1/apps/{nac_app_ref}/.well-known/jwks.json, GET /.well-known/openid-configuration and GET /.well-known/oauth-authorization-server. The well-known documents are served behind the RapidAPI gateway and are not anonymously retrievable — an unauthenticated GET returns HTTP 404 or 429. CAMARA CIBA (Client-Initiated Backchannel Authentication) does not appear anywhere in either harvested specification.