---
title: "OAuth protected resource metadata (RFC 9728) for the MCP server"
method: GET
path: "/.well-known/oauth-protected-resource"
tags: ["auth"]
---

# OAuth protected resource metadata (RFC 9728) for the MCP server

`GET /.well-known/oauth-protected-resource`

## Request

- Base URL: `https://cliponit.app`
- URL: `https://cliponit.app/.well-known/oauth-protected-resource`
- Auth: none required

Also served at `/.well-known/oauth-protected-resource/mcp`. Referenced by the `WWW-Authenticate: Bearer resource_metadata="…"` header on every 401 from `POST /mcp`.

## Response `200`

Metadata

- object
  - `resource` string
  - `authorization_servers` string[]
  - `scopes_supported` string[]
  - `bearer_methods_supported` string[]

---

[API](https://skmtc.dev/cliponit/apis/cliponit-api.md) · [All operations](https://skmtc.dev/cliponit/apis/cliponit-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cliponit/apis/cliponit-api/revisions/10e3e4327922?raw)