Overview
oauth.work API (1.0.0)
Section titled “oauth.work API (1.0.0)”Enterprise identity, OAuth 2.0 / OIDC, and W3C Verifiable Credentials on Cloudflare Workers. This document covers the OAuth/OIDC protocol endpoints, the credential APIs, and the /v1 management API. Management calls authenticate with an sk_live_… API key as a Bearer token; agent/MCP clients use the OAuth client-credentials grant (optionally DPoP-bound).
- License: Proprietary
- OpenAPI version: 3.1.0
Authentication
Section titled “ Authentication ”apiKey
Section titled “apiKey ”Management API key (sk_live_…).
Security scheme type: http
oauth2
Section titled “oauth2 ”Security scheme type: oauth2
Flow type: authorizationCode
Authorization URL: https://acme.oauth.work/authorize
Token URL: https://acme.oauth.work/token
Scopes:
- openid - OIDC sign-in
- profile - Profile claims
- offline_access - Refresh token
- work_credential - Work Credential
Flow type: clientCredentials
Token URL: https://acme.oauth.work/token
scimToken
Section titled “scimToken ”Per-connection SCIM bearer token (scim_…).
Security scheme type: http