---
title: "Get OAuth protected resource metadata for /mcp/admin"
method: GET
path: "/mcp/admin/.well-known/oauth-protected-resource"
tags: ["OAuth"]
---

# Get OAuth protected resource metadata for /mcp/admin

`GET /mcp/admin/.well-known/oauth-protected-resource`

## Request

- Base URL: `https://api.openworklabs.com`
- URL: `https://api.openworklabs.com/mcp/admin/.well-known/oauth-protected-resource`
- Auth: none required

Returns the RFC 9728 protected-resource metadata MCP clients use to discover the authorization server and scopes for this transport.

## Response `200`

Protected resource metadata (RFC 9728).

- OAuthProtectedResourceMetadata
  - `resource` string, required
  - `authorization_servers` string[], required
  - `scopes_supported` string[], required
  - `bearer_methods_supported` string[], required

## Changes

- **2026-09-11** `bb8ff73e4ad3`: 2 info
  - api tag `OAuth` added
  - added the media type `application/json` for the response with the status `200`

[Operation history](https://skmtc.dev/openworklabs/apis/den-api/changes/mcp/admin/.well-known/oauth-protected-resource/get.md)

---

[API](https://skmtc.dev/openworklabs/apis/den-api.md) · [All operations](https://skmtc.dev/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openworklabs/apis/den-api/revisions/6cd7fffc8d0b?raw)