diff --git a/fern/products/cli-generator/authentication.mdx b/fern/products/cli-generator/authentication.mdx
index 26861173b2..c488d53fc7 100644
--- a/fern/products/cli-generator/authentication.mdx
+++ b/fern/products/cli-generator/authentication.mdx
@@ -48,7 +48,8 @@ The CLI supports every scheme type that OpenAPI's `securitySchemes` defines:
 | Bearer (`http: bearer`) | Sends `Authorization: Bearer <token>`. |
 | API key (`apiKey`) | Sends the key in the configured header (for example, `X-Auth-Token`). |
 | Basic (`http: basic`) | Sends `Authorization: Basic <base64(user:pass)>`. Each field has its own credential source. |
-| OAuth 2 | Treated as bearer — sends `Authorization: Bearer <token>`. |
+| OAuth 2 (client credentials) | Reads the client ID and secret from `<BIN>_CLIENT_ID` and `<BIN>_CLIENT_SECRET` (or the names in the API definition) and fetches the token automatically. |
+| OAuth 2 (other) | Treated as bearer — sends `Authorization: Bearer <token>`. |
 
 ## Auth strategies