---
title: "OAuth 2.0 protected resource metadata"
method: GET
path: "/.well-known/oauth-protected-resource"
tags: ["Discovery"]
---

# OAuth 2.0 protected resource metadata

`GET /.well-known/oauth-protected-resource`

## Request

- Base URL: `https://aicoolies.com`
- URL: `https://aicoolies.com/.well-known/oauth-protected-resource`
- Auth: none required

RFC 9728 metadata for the aicoolies API resource. Public catalog reads need no authorization; MCP writes use GitHub-bound scoped personal access tokens, while human account routes use a first-party session.

## Response `200`

Protected resource metadata

- OAuthProtectedResourceMetadata: RFC 9728 OAuth 2.0 Protected Resource Metadata.
  - `resource` string, uri, required
  - `resource_name` string
  - `resource_documentation` string, uri
  - `resource_policy_uri` string, uri
  - `bearer_methods_supported` string[]
  - `scopes_supported` string[]
  - `authorization_details_types_supported` string[]

---

[API](https://skmtc.dev/aicoolies/apis/aicoolies-public-api.md) · [All operations](https://skmtc.dev/aicoolies/apis/aicoolies-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/aicoolies/apis/aicoolies-public-api/revisions/8d666d0ed7aa?raw)