What is CIMD?
In short:CIMD, Client ID Metadata Documents, lets an OAuth client use an HTTPS URL as its client ID. A JSON document at that URL describes the client. The 2026-07-28 MCP specification made CIMD the client registration method, replacing Dynamic Client Registration for MCP clients.
How does it work?
The authorization server fetches the document from the client ID URL, checks redirect URIs and caches the result.
What does it look like in practice?
Descope names CIMD in its Agentic Identity Hub material.