AI Governance Engineer
GitHub

CIMD

By Updated

Client ID Metadata Document: the mechanism by which an OAuth client identifies itself with a URL, used as its client ID, that points to its metadata document. The MCP specification of 2026-07-28 has clients and authorisation servers support it and deprecates Dynamic Client Registration 1; the IETF specification is still an Internet-Draft (revision 02, 6 Jul 2026) as of 2026-09-24 2.

Developed in
ch. 23, MCP authorization as of 2026-07-28
ch. 04, Layer 04: Runtime Controls & Observability
Chapters
ch. 04, The Stack · ch. 05, Patterns · ch. 23, AI Agents
Source
2 numbered references, listed below

Where it is used

The term is not used under this name in running prose; the sections listed under "Developed in" treat it.

  • Guardian agent

    An AI agent whose job is to supervise, check or constrain other agents at runtime; Gartner predicts guardian-agent technologies will account for at least 10…

  • MCP

    Model Context Protocol: an open protocol for connecting AI applications to tools and data sources; its 2026 specification adds OAuth 2.1 resource-server…

  • Prompt injection

    An input that alters a model's behaviour or output in ways its designers did not intend.

  • Token passthrough

    The anti-pattern in which a server accepts a token that was not issued to it and forwards it, unmodified, to a downstream API, which may then trust it as if…

  • Workload identity

    The attributable identity a workload such as an agent carries across every hop, under which its actions are logged and its access is revoked, typically a…

Sources

  1. [1] Model Context Protocol specification 2026-07-28 (OAuth 2.1 resource servers; Client ID Metadata Documents; issuer-bound credentials). Anthropic / MCP. 2026-07-28. https://blog.modelcontextprotocol.io/posts/2026-07-28/ (verified: primary)
  2. [2] draft-ietf-oauth-client-id-metadata-document-02, OAuth Client ID Metadata Document (Internet-Draft, OAuth working group, revision 02 of 6 Jul 2026; a URL used as client_id that refers to the client's metadata document). IETF. 2026-07-06. https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/ (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). CIMD. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/cimd. CC BY 4.0

BibTeX

@misc{aige2026cimd,
  author  = {Jorge García Aibar},
  title   = {{CIMD}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/cimd}
}