---
title: "Protected resource metadata"
method: GET
path: "/.well-known/oauth-protected-resource"
tags: ["OAuth"]
---

# Protected resource metadata

`GET /.well-known/oauth-protected-resource`

## Request

- Base URL: `https://makefx.app`
- URL: `https://makefx.app/.well-known/oauth-protected-resource`
- Auth: none declared

RFC 9728: which authorization server protects the API, and which scopes it understands.

## Response `200`

Success

- object
  - `resource` string, uri, required
  - `resource_name` string, required
  - `authorization_servers` string[], required
  - `bearer_methods_supported` string[], required
  - `scopes_supported` string[], required
  - `jwks_uri` string, uri, required
  - `resource_documentation` string, uri, required

## Other responses

- `404`: Not found
- `429`: Rate limited. RateLimit names the policy; Retry-After says when to try again
- `500`: Internal server error

---

[API](https://skmtc.dev/makefx/apis/makefx-app-api.md) · [All operations](https://skmtc.dev/makefx/apis/makefx-app-api/llms.txt) · [OpenAPI document](https://skmtc.dev/makefx/apis/makefx-app-api/revisions/a05584da31c6?raw)