Discover the configured Commerce MCP OAuth resource

Registered only when COMMERCE_MCP_OAUTH_ENABLED=1 and both canonical HTTPS resource and issuer URLs are configured. Otherwise this route is absent. The document is static public metadata; no authority, identity, credential or tenant store is consulted. Request headers cannot change its resource or authorization server. Responses use Cache-Control: no-store and Access-Control-Allow-Origin: *. scopes_supported contains the three reviewer scopes by default. The additional erp:read and history:assess scopes appear only when the separate data-access feature is enabled. Advertising support grants no permission; each request is independently authenticated and consent checked. The additional marketplace:read, erp:validate, approval:request and erp:configure scopes appear only with the connected feature enabled.

get/.well-known/oauth-protected-resource/v1/commerce/mcp

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/.well-known/oauth-protected-resource/v1/commerce/mcp
  • Auth: none required

Response

RFC 9728 protected resource metadata

resourcestring uri required
authorization_serversstring[] required
bearer_methods_supportedunknown required
resource_name'Commerce Gate' required

Changes

No recorded changes to this operation across all 1 revision of this API.