---
title: "Protected resource metadata (RFC 9728)"
method: GET
path: "/oauth/protected-resource"
tags: ["agent-auth"]
---

# Protected resource metadata (RFC 9728)

`GET /oauth/protected-resource`

## Request

- Base URL: `https://api.letsship.ai/v1`
- URL: `https://api.letsship.ai/v1/oauth/protected-resource`
- Auth: none declared

The metadata for one resource this authorization server issues tokens for: the API, the MCP server or the A2A endpoint. The API serves its own at https://api.letsship.ai/.well-known/oauth-protected-resource.

## Query parameters

- `resource` string, required

## Response `200`

The metadata.

- ProtectedResourceMetadata
  - `resource` string, required
  - `resource_name` string, required
  - `authorization_servers` string[], required
  - `scopes_supported` string[], required
  - `bearer_methods_supported` string[], required
  - `resource_documentation` string, required

## Other responses

- `404`: Not a resource of this server.

---

[API](https://skmtc.dev/letsship/apis/ship-api.md) · [All operations](https://skmtc.dev/letsship/apis/ship-api/llms.txt) · [OpenAPI document](https://skmtc.dev/letsship/apis/ship-api/revisions/e6eac1bcadd4?raw)