OAuth

Protected resource metadata (RFC 9728)

Changed on

Discovery document of the MCP server as an OAuth 2.1 protected resource. MCP clients fetch it from the URL announced in the WWW-Authenticate header of a 401 answer of the MCP endpoint, or directly at this path. It names the authorization server (this same API) and the supported scopes.

get/.well-known/oauth-protected-resource/v1/agent/mcp

Request

  • Base URL: https://api.educaplay.com
  • URL: https://api.educaplay.com/.well-known/oauth-protected-resource/v1/agent/mcp
  • Auth: none required

Response

Metadata document.

resourcestring uri

Canonical URL of the MCP endpoint.

authorization_serversstring[]
bearer_methods_supportedstring[]
scopes_supportedstring[]

Example response

{
  "bearer_methods_supported": [
    "header"
  ],
  "scopes_supported": [
    "educaplay"
  ]
}

Changes