🔐
AB-133
Private key JWT authentication
What it means
Your token endpoint supports private_key_jwt auth method (optional).
Why it matters
Private key JWT enables asymmetric client authentication — agents prove identity with a signed JWT instead of a shared secret, enabling non-repudiation.
✗
What's wrong
token_endpoint_auth_methods_supported: ['client_secret_basic']
✓
What's right
token_endpoint_auth_methods_supported: ['client_secret_basic', 'private_key_jwt']
Check this rule on your site
Enter your URL to check just this one rule (AB-001).