---
title: "Get OAuth protected resource metadata for /mcp/agent"
method: GET
path: "/.well-known/oauth-protected-resource/mcp/agent/servers/{connectionId}"
tags: ["OAuth"]
---

# Get OAuth protected resource metadata for /mcp/agent

`GET /.well-known/oauth-protected-resource/mcp/agent/servers/{connectionId}`

## Request

- Base URL: `https://api.openworklabs.com`
- URL: `https://api.openworklabs.com/.well-known/oauth-protected-resource/mcp/agent/servers/{connectionId}`
- Auth: none required

Returns the RFC 9728 protected-resource metadata MCP clients use to discover the authorization server and scopes for this transport.

## Path parameters

- `connectionId` string, required

## Response `200`

Protected resource metadata (RFC 9728).

- OAuthProtectedResourceMetadata
  - `resource` string, required
  - `authorization_servers` string[], required
  - `scopes_supported` string[], required
  - `bearer_methods_supported` string[], required

## Changes

- **2026-10-21** `8b797799efc8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/openworklabs/apis/den-api/changes/.well-known/oauth-protected-resource/mcp/agent/servers/:connectionId/get.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openworklabs/apis/den-api/revisions/22a4e8c36059?raw)