---
title: "Protected Resource Metadata"
method: GET
path: "/.well-known/oauth-protected-resource/mcp"
---

# Protected Resource Metadata

`GET /.well-known/oauth-protected-resource/mcp`

## Request

- Base URL: `https://fluxito.app` (the document declares no server; this is the origin it was published from)
- URL: `https://fluxito.app/.well-known/oauth-protected-resource/mcp`
- Auth: none declared

RFC 9728 — OAuth 2.0 Protected Resource Metadata.

Newer MCP clients (including current Claude.ai) fetch this to discover
which authorization server protects the /mcp resource. Without it the
client gives up before attempting the token exchange.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/fluxito/apis/fluxito-platform.md) · [All operations](https://skmtc.dev/fluxito/apis/fluxito-platform/llms.txt) · [OpenAPI document](https://skmtc.dev/fluxito/apis/fluxito-platform/revisions/d558e1fe9a04?raw)