This is the future of MCP auth, so we should support it:
https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/

I am only aware of two auth servers that support it:

• BlueSky
• Stych

... but this list will grow.

The plan is for this flow to be adopted in MCP in November's cut of the spec so we should do this to be ahead of the game.

The design I am thinking about is hosting the CIMD on a vscode.dev route, then that can be mixed in in distro.