---
title: UsageMax authorization-server metadata
description: Markdown twin for the UsageMax browser-session authorization metadata.
canonical: https://usagemax.com/.well-known/oauth-authorization-server
last-updated: 2026-09-16
---

# UsageMax authorization-server metadata

UsageMax publishes an RFC 8414-shaped discovery document for its website
browser sign-in entry point. It starts a WorkOS AuthKit browser session; it does
not mint a general-purpose API access token or provide OAuth delegation.

- Issuer: https://usagemax.com
- Browser sign-in entry point: https://usagemax.com/auth/start
- Website session: WorkOS AuthKit browser session
- Website scope: website_session
- OAuth token exchange: not provided
- OAuth delegation: false

Collector uploads use a separate installation-bound, write-only umx_ bearer
credential created by the one-use computer link flow. Do not treat a website
session cookie as a collector credential.

- [JSON authorization-server metadata](https://usagemax.com/.well-known/oauth-authorization-server)
- [Protected-resource metadata](https://usagemax.com/.well-known/oauth-protected-resource)
- [Authentication walkthrough](https://usagemax.com/auth.md)