---
title: OAuth 2.0 endpoints
description: When acting as an OAuth 2.0 authorization server, AM exposes the following endpoints:
component: pingam
version: 7.2
page_id: pingam:oauth2-guide:oauth2-client-endpoints
canonical_url: https://docs.pingidentity.com/pingam/8.1/am-oauth2/oauth2-client-endpoints.html
llms_txt: https://docs.pingidentity.com/pingam/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
superseded_by: https://docs.pingidentity.com/pingam/8.1/am-oauth2/oauth2-client-endpoints.html
---

# OAuth 2.0 endpoints

When acting as an OAuth 2.0 authorization server, AM exposes the following endpoints:

**OAuth 2.0 Endpoints**

| Endpoint               | Description                                                                                                                |
| ---------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| `/oauth2/par`          | Register a pushed authorization request and get a request URI (RFC 9126 PAR endpoint)                                      |
| `/oauth2/authorize`    | Obtain consent and an authorization grant (RFC 6749 authorization endpoint)                                                |
| `/oauth2/bc-authorize` | Initiate backchannel authorization (Backchannel flow endpoint)                                                             |
| `/oauth2/access_token` | Obtain an access token (RFC 6749 token endpoint)                                                                           |
| `/oauth2/device/code`  | Obtain a device code (Device flow endpoint)                                                                                |
| `/oauth2/device/user`  | Obtain consent and authorization grant (Device flow endpoint)                                                              |
| `/oauth2/token/revoke` | Revoke both access and refresh tokens (RFC 7009 endpoint)                                                                  |
| `/oauth2/introspect`   | Retrieve metadata about a token, such as approved scopes and the context in which the token was issued (RFC 7662 endpoint) |
| `/json/token/macaroon` | Retrieve metadata about a macaroon, and add caveats.                                                                       |

|   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | As an OAuth 2.0/OpenID Connect/UMA provider, AM also exposes the following:- OAuth 2.0 endpoints to perform administrative tasks, such as creating clients. For more information, see [OAuth 2.0 administration REST endpoints](oauth2-admin-endpoints.html)

- OpenID Connect-specific endpoints. For more information, see [OpenID Connect 1.0 endpoints](../oidc1-guide/oidc-client-endpoints.html).

- UMA-specific endpoints. For more information, see [UMA endpoints](../uma-guide/uma-endpoints.html). |