🔐
AB-134
Token Exchange (RFC 8693) supported
What it means
Your OAuth metadata supports token-exchange grant type (optional).
Why it matters
Token exchange lets agents trade one token for another with reduced scope — enabling delegation patterns where an agent acts on behalf of a user.
✗
What's wrong
grant_types_supported: ['client_credentials']
✓
What's right
grant_types_supported: ['client_credentials', 'urn:ietf:params:oauth:grant-type:token-exchange']
Check this rule on your site
Enter your URL to check just this one rule (AB-001).