Add check for CIMD of authorization server metadata

[tnorimat]

Background

The issue is adding SHOULD requirement check.

The MCP specification 2025-11-25 says that:

2. Authorization servers and MCP clients SHOULD support OAuth Client ID Metadata Documents (draft-ietf-oauth-client-id-metadata-document-00).

OAuth Client ID Metadata Document says that:

Authorization servers that publish Authorization Server Metadata [RFC8414] MUST include the following property to signal support for client metadata documents as described in this specification.

client_id_metadata_document_supported: OPTIONAL. Boolean value specifying whether the authorization server supports retrieving client metadata from a client_id URL as described in this specification.

Considering these points, the conformance test for MCP version 2025-11-25 for authorization server must check whether the server metadata includes client_id_metadata_document_supported and its values should be true. However, the conformance test for authorization server metadata (#170) does not check that.

Solution

Adding the following checks do the conformance test for authorization server metadata (#170):

• if the command includes --spec-version 2025-11-25,
  • check if the server metadata includes client_id_metadata_document_supported, if not, the test fails.
  • next, check if the client_id_metadata_document_supported value is true. If not, the test fails.
• otherwise, the conformance test does not check that.

[tnorimat]

@pcarleton Hello, if the issue makes sense, could you assign me to the issue? I cannot assign myself to the issue.