OAuth 2.1 PKCE

What it does

Built-in OAuth server for third-party applications with PKCE S256 and dynamic client registration.

Features

• OAuth 2.1/2.0 with PKCE S256
• Dynamic Client Registration (RFC 7591)
• Endpoints: authorization, token, consent screen
• Scopes mapped to permissions (scope-map)
• Discovery endpoints: .well-known/oauth-authorization-server, oauth-protected-resource, openid-configuration
• Enableable via immens_mcp_fortress_oauth_enabled hook

→ Plugin overview | → Modules index

---

Studio Immens - Technical documentation