{
  "issuer": "https://pinpointaccountingservice.com",
  "authorization_endpoint": "https://pinpointaccountingservice.com/api/oauth/authorize",
  "token_endpoint": "https://pinpointaccountingservice.com/api/oauth/token",
  "jwks_uri": "https://pinpointaccountingservice.com/.well-known/jwks.json",
  "registration_endpoint": "https://pinpointaccountingservice.com/agent-registration",
  "scopes_supported": [
    "public:read",
    "lead:create"
  ],
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "private_key_jwt"
  ],
  "service_documentation": "https://pinpointaccountingservice.com/.well-known/api-docs.md",
  "op_policy_uri": "https://pinpointaccountingservice.com/agents.txt",
  "op_tos_uri": "https://pinpointaccountingservice.com/terms",
  "agent_auth": {
    "status": "registration_required_for_private_apis",
    "skill": "https://pinpointaccountingservice.com/auth.md",
    "register_uri": "https://pinpointaccountingservice.com/agent-registration",
    "auth_md": "https://pinpointaccountingservice.com/auth.md",
    "identity_types_supported": [
      "anonymous",
      "organization",
      "service_agent"
    ],
    "supported_identity_types": [
      "anonymous",
      "organization",
      "service_agent"
    ],
    "credential_types_supported": [
      "oauth2-client-credentials",
      "private_key_jwt"
    ],
    "claim_uri": "https://pinpointaccountingservice.com/agent-registration#claims",
    "revocation_uri": "https://pinpointaccountingservice.com/agent-registration#revocation",
    "anonymous": {
      "credential_types_supported": [
        "none"
      ],
      "claim_uri": "https://pinpointaccountingservice.com/auth.md#anonymous-claims"
    },
    "note": "Public website discovery endpoints do not require OAuth. Private operational API access requires case-by-case approval by Pinpoint Accounting."
  }
}