OIDC website screenshot

OIDC

OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that enables clients to verify the identity of end-users based on authentication performed by an authorization server. It provides a standardized way to obtain basic profile information about users through RESTful endpoints including discovery, authorization, token, userinfo, and JWKS.

OIDC publishes 6 APIs on the APIs.io network, including Authentication API, Discovery API, JWKS API, and 3 more. Tagged areas include Authentication, Identity, JWT, OAuth, and OIDC.

The OIDC catalog on APIs.io includes 1 Spectral governance ruleset.

OIDC’s developer surface includes authentication, documentation, engineering blog, and 4 more developer resources.

44.2/100 developing ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
6 APIs
AuthenticationIdentityJWTOAuthOIDCOpenID Connect

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 44.2/100 · developing
Contract Quality 13.1 / 25
Developer Ergonomics 5.7 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 4.1 / 13
Governance 7.0 / 12
Discoverability 6.5 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/oidc: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

OIDC Authentication API

Endpoints for authenticating end-users and obtaining authorization grants.

OIDC Discovery API

OpenID Connect Discovery endpoints for provider metadata.

OIDC JWKS API

JSON Web Key Set endpoint for token signature verification.

OIDC Session API

Session management endpoints including logout.

OIDC Token API

Token endpoint for exchanging authorization codes for tokens.

OIDC UserInfo API

Endpoint for retrieving claims about the authenticated end-user.

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

OpenID Connect API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Oidc Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Oidc Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Oidc Finops

FINOPS

Spectral Rules 1

Spectral governance rulesets for linting and validating these APIs.

OIDC API Rules

5 rules · 4 warnings 1 info

SPECTRAL

JSON Schema 3

Standalone JSON Schema definitions for this provider's data models.

OpenID Connect Discovery Document

34 properties

JSON SCHEMA

OpenID Connect ID Token Claims

32 properties

JSON SCHEMA

OpenID Connect UserInfo Response

20 properties

JSON SCHEMA

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Oidc Authentication

http · 1 scheme

SECURITY

Oidc Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Oidc Agentic Access

7 operations · 2 acting

7 operations · 2 acting

AGENTIC

Resources

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Access & Security 2

Authentication, authorization, and security posture

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: oidc
name: OIDC
description: OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that enables clients to verify the identity
  of end-users based on authentication performed by an authorization server. It provides a standardized way to obtain basic
  profile information about users through RESTful endpoints including discovery, authorization, token, userinfo, and JWKS.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/oidc.png
tags:
- Authentication
- Identity
- JWT
- OAuth
- OIDC
- OpenID Connect
url: https://raw.githubusercontent.com/api-evangelist/oidc/refs/heads/main/apis.yml
created: '2025-01-01'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: oidc:oidc-authentication-api
  name: OIDC Authentication API
  description: Endpoints for authenticating end-users and obtaining authorization grants.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/oidc-authentication-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
- aid: oidc:oidc-discovery-api
  name: OIDC Discovery API
  description: OpenID Connect Discovery endpoints for provider metadata.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - Discovery
  properties:
  - type: OpenAPI
    url: openapi/oidc-discovery-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
- aid: oidc:oidc-jwks-api
  name: OIDC JWKS API
  description: JSON Web Key Set endpoint for token signature verification.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - JWKS
  properties:
  - type: OpenAPI
    url: openapi/oidc-jwks-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
- aid: oidc:oidc-session-api
  name: OIDC Session API
  description: Session management endpoints including logout.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - Session
  properties:
  - type: OpenAPI
    url: openapi/oidc-session-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
- aid: oidc:oidc-token-api
  name: OIDC Token API
  description: Token endpoint for exchanging authorization codes for tokens.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - Token
  properties:
  - type: OpenAPI
    url: openapi/oidc-token-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
- aid: oidc:oidc-userinfo-api
  name: OIDC UserInfo API
  description: Endpoint for retrieving claims about the authenticated end-user.
  humanURL: https://openid.net/specs/openid-connect-core-1_0.html
  tags:
  - UserInfo
  properties:
  - type: OpenAPI
    url: openapi/oidc-userinfo-api-openapi.yml
  - type: Documentation
    url: https://openid.net/specs/openid-connect-core-1_0.html
common:
- type: AgenticAccess
  url: agentic-access/oidc-agentic-access.yml
- type: DomainSecurity
  url: security/oidc-domain-security.yml
- type: Authentication
  url: authentication/oidc-authentication.yml
- type: Website
  url: https://openid.net/
- type: Documentation
  url: https://openid.net/developers/specs/
- type: Reference
  url: https://openid.net/specs/openid-connect-core-1_0.html
- type: Blog
  url: https://openid.net/feed/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com