Get Auth Config

Identity provider a command-line client should authenticate against.

Unauthenticated by design — it is the first call a client makes, before it has any credential, and it returns only values that are public by nature: an issuer URL, a public client identifier, and the OAuth endpoints to use.

The endpoints are served explicitly rather than left to OpenID discovery: WorkOS accepts AuthKit application clients only on its native user_management endpoints, while the AuthKit domain's /oauth2 facade (what discovery advertises) refuses them.

curl -X GET "https://api.levainlabs.com/api/v1/authoring/auth-config"

{
  "authkit_domain": "string",
  "client_id": "string",
  "device_authorization_endpoint": "string",
  "token_endpoint": "string"
}