diff --git a/README.md b/README.md
new file mode 100644
index 0000000..9efae33
--- /dev/null
+++ b/README.md
@@ -0,0 +1,19 @@
+Test OAuth2 Authorization Code Grant process
+
+
+Code is quite minimal done in js with no lib.
+
+
+## Running the Demo
+
+If you don't want to use sws, you can use python 3.
+
+``` python
+python server.py
+```
+
+## Utility scripts
+
+Modify `scripts/get_refresh_token` to retrieve a refresh/access token from the CTR API. 
+
+Modify `scripts/test_access_token` to use your access token to query the CTR API.
\ No newline at end of file
diff --git a/scripts/get_refresh_token.sh b/scripts/get_refresh_token.sh
new file mode 100755
index 0000000..406b63b
--- /dev/null
+++ b/scripts/get_refresh_token.sh
@@ -0,0 +1,9 @@
+curl -X POST https://visibility.amp.cisco.com/iroh/oauth2/token \
+    --header "Accept: application/json" \
+    --header "Content-Type: application/x-www-form-urlencoded; charset=UTF-8" \
+    --header "User-Agent: ob-http" \
+    --header "Authorization: Basic <BASE64 ENCODING OF CLIENT_ID:CLIENT_SECRET >" \
+    -d "code=<CODE JWT RETURNED FROM CTR>" \
+    -d "redirect_uri=https://localhost:4443/callback" \
+    -d "scope=admin" \
+    -d "grant_type=authorization_code"
diff --git a/scripts/test_access_token.sh b/scripts/test_access_token.sh
new file mode 100755
index 0000000..4229530
--- /dev/null
+++ b/scripts/test_access_token.sh
@@ -0,0 +1,5 @@
+curl -G https://visibility.amp.cisco.com/iroh/profile/whoami \
+    --header "Accept: application/json" \
+    --header "application/json; charset=UTF-8" \
+    --header "User-Agent: ob-http" \
+    --header "Authorization: Bearer <YOUR_ACCESS_TOKEN_HERE>" \
\ No newline at end of file
diff --git a/server.py b/server.py
new file mode 100644
index 0000000..749be47
--- /dev/null
+++ b/server.py
@@ -0,0 +1,11 @@
+import http.server, ssl
+
+server_address = ('localhost', 4443)
+httpd = http.server.HTTPServer(server_address, http.server.SimpleHTTPRequestHandler)
+httpd.socket = ssl.wrap_socket(httpd.socket,
+                               server_side=True,
+                               certfile='cert.pem',
+                               keyfile='nopasskey.pem',
+                               ssl_version=ssl.PROTOCOL_TLS)
+print("serving demo on port 4443")
+httpd.serve_forever()
\ No newline at end of file