---
title: "RFC 9728 protected-resource metadata"
method: GET
path: "/.well-known/oauth-protected-resource"
tags: ["well-known"]
---

# RFC 9728 protected-resource metadata

`GET /.well-known/oauth-protected-resource`

## Request

- Base URL: `https://mcphost.dev`
- URL: `https://mcphost.dev/.well-known/oauth-protected-resource`
- Auth: none declared

## Response `200`

OK

- ProtectedResourceMetadata
  - `authorization_servers` string[], required
  - `bearer_methods_supported` string[], required
  - `resource` string, required

## Other responses

- `500`: Internal Server Error

---

[API](https://skmtc.dev/mcphost/apis/mcphost-http-api.md) · [All operations](https://skmtc.dev/mcphost/apis/mcphost-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mcphost/apis/mcphost-http-api/revisions/c5e92a236380?raw)