---
title: "GET /.well-known/oauth-protected-resource/mcp-platform"
method: GET
path: "/.well-known/oauth-protected-resource/mcp-platform"
tags: ["wellKnown"]
---

# GET /.well-known/oauth-protected-resource/mcp-platform

`GET /.well-known/oauth-protected-resource/mcp-platform`

## Request

- Base URL: `https://headless.dataddo.com`
- URL: `https://headless.dataddo.com/.well-known/oauth-protected-resource/mcp-platform`
- Auth: none required

OAuth 2.0 Protected Resource Metadata (RFC 9728) for the /mcp-platform endpoint

## Response `200`

protected resource metadata

- ProtectedResourceMetadataResource: OAuth 2.0 Protected Resource Metadata (RFC 9728) served at /.well-known/oauth-protected-resource/mcp-platform. `bearer_methods_supported` is limited to `header`: the MCP specification forbids passing the access token in the query string or a form body.
  - `resource` string
  - `authorization_servers` string[]
  - `scopes_supported` string[]
  - `bearer_methods_supported` string[]
  - `resource_name` string
  - `resource_documentation` string

---

[API](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api.md) · [All operations](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dataddo/apis/dataddo-headless-beta-api/revisions/dcfa2345bd10?raw)